Workspace Environment Management

Application security

June 2, 2024

Contributed by:

Application security feature allows you to define rules to control which applications and files the users can run. You can configure application security rules in the web console and provide a tool to retrieve information needed for rule configuration. Also, you can use this feature to create assignment groups with security rules. When the Process application rules and Process DLL rules are enabled, the Overwrite mode is turned on by default. In Overwrite mode, the rules that are processed in the end overwrite rules that were processed earlier. We recommend that you apply this mode to only single-session machines. This feature also allows you to create the following rules:

Executable rules
Windows installer rules
Script rules
Packaged app rules
DLL rules

Note: Before creating rules, we recommend that you first add the default rules to ensure thatimportant syatem files can run.

Create Windows installer rule

This includes two menu items, Basic information and Exceptions. To create a Windows installer rule, complete the following steps under Basic information and Exceptions:

Selecting Create rule leads you to the Create Windows installer rule page.
Enter the name and an optional description.
Choose the desired Action.
Select the Criteria type such as Path, Publisher, or File hash from the dropdown list.
Selecting Open File info Viewer directs you to the WEM Tool Hub. Use the WEM Tool Hub** to quickly get the required information. For more information, see File Info Viewer.
Optionally, you can add exceptions to include files that is normally included in the rule based on the primary criteria. To perform this task, select Add exception.
Go to WEM Tool Hub to copy data from one of the specified criteria under File Info Viewer and then click Paste from File Info Viewer.
Click Done.
Select Continue to assignment to update the assignments as required in the Manage assignments page.
Select Assignment targets (users and groups) to assign this item to. Use filters to contextualize the assignment. Filters you specify are effective only in the Overwrite mode and are supported only on agent versions 2406 or later.
Enter an asterisk if you need a specific rule to be applied to all files.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Application security

June 2, 2024

Contributed by:

June 2, 2024

Contributed by:

Application security

Create Windows installer rule

In this article