Supporting white list mode

After selecting a blocking action for Application Control, it is recommended to continue supporting white list mode by performing the following actions:

• Examine the events resulting from the operation of Application Control and reports on blocked runs to analyze the effectiveness of Application Control.
• Analyze users' requests to access applications.
• Analyze unfamiliar executable files by checking their reputation in Kaspersky Security Network or on the Kaspersky Whitelist portal.
• Prior to installing updates for the operating system or for software, install those updates on a test group of computers to check how they will be processed by Application Control rules.
• Add the necessary applications to categories used in Application Control rules.

Page top