Operating mode

Windows

Linux

You can choose one of the following options:

• Allow all except the rules list. If this option is selected, Application Control allows all users to start any applications, except in cases that satisfy the conditions of Application Control block rules.
• Block all except the rules list. If this option is selected, Application Control blocks all users from starting any applications, except in cases that satisfy the conditions of Application Control allow rules.

Windows When Block all except the rules list mode is selected, two Application Control rules are automatically created:

• Golden Image (the rule is hidden).
• Trusted Installation Packages.

You cannot edit the settings of or delete automatically created rules. You can enable or disable these rules.

Rules

Windows

Linux

Kaspersky Endpoint Security controls the startup of applications by users by means of rules. An Application Control rule specifies the triggering conditions and actions performed by the Application Control component when the rule is triggered (allowing or blocking application startup by users).

For each Application Control mode, you can add up to five rules.

You can select one of the following criteria for triggering Application Control rules:

• Application categories Windows
• Individual applications Windows / Linux
• All applications from removable drives Windows