How to block the access of Application using Symantec Endpoint Protection's Application and Device Control (ADC) policies

Products

• Endpoint Protection

Issue/Introduction

How to block the access of a specific Application, like vlc.exe?

 

Resolution

 

Block Access of Application

1. Login into the Symantec Endpoint Protection Manager (SEPM) console.
2. Click Policies, and then click Application and Device Control under View Policies.
3. Select the Application and Device Control policy which needs to be modified on the right-hand side.
4. Click Edit the Policy under Tasks.
5. In the pop-up window, click Application Control.
6. Click the Add... button.
7. In section of “Apply this rule in the following process” click on ADD and enter the Asterisk (*) Sign. Then Select Ok.
8. Now Click on Add from Bottom
9. Click on Add Condition and select the Launch Process Attempts.
10. Under the Launch Process Attempts box click on ADD in the section of “Apply this rule in the following process”
11. Enter the application name (eg- vlc.exe)
12. Then press ok
13. Go to the Action Tab in “Launch Process Attempts”.
14. Select the Block Access in the “Launch Process Attempts” and check “enable logging”.
15. Select Ok.
16. Assign the policy to the required Group.