Application Control functionality limitations

Operation of the Application Control component is limited in the following cases:

• When the application version is upgraded, importing Application Control component settings is not supported.
• When the application version is upgraded, importing Application Control settings is supported only if Kaspersky Endpoint Security 10 Service Pack 2 for Windows or later is upgraded to Kaspersky Endpoint Security 11.5.0 for Windows.

  When application versions other than Kaspersky Endpoint Security 10 Service Pack 2 for Windows are upgraded, the Application Control settings have to be configured anew in order to restore this component to operational state.

• If there is no connection with KSN servers, Kaspersky Endpoint Security receives information about the reputation of applications and their modules only from local databases.

  The list of applications assigned by Kaspersky Endpoint Security to the KL category Applications trusted according to reputation in KSN when a connection to KSN servers is available may differ from the list of applications assigned by Kaspersky Endpoint Security to the KL category Applications trusted according to reputation in KSN when there is no connection to KSN.

• At the Kaspersky Security Center database, information on 150,000 processed files may be stored. Once this number of records has been achieved, new files will not be processed. To resume inventory operations, you must delete the files that were previously inventoried in the Kaspersky Security Center database from the computer on which Kaspersky Endpoint Security is installed.
• The component does not control the startup of scripts unless the script is sent to the interpreter via the command line.

  If the startup of an interpreter is allowed by Application Control rules, the component will not block a script started from this interpreter.

  If at least one of the scripts specified in the interpreter command line is blocked from start by Application control rules, the component blocks all the scripts, specified in the interpreter command line.

• The component does not control the startup of scripts from interpreters that are not supported by Kaspersky Endpoint Security.

  Kaspersky Endpoint Security supports the following interpreters:

  • Java
  • PowerShell

  The following types of interpreters are supported:

  • %ComSpec%;
  • %SystemRoot%\\system32\\regedit.exe;
  • %SystemRoot%\\regedit.exe;
  • %SystemRoot%\\system32\\regedt32.exe;
  • %SystemRoot%\\system32\\cscript.exe;
  • %SystemRoot%\\system32\\wscript.exe;
  • %SystemRoot%\\system32\\msiexec.exe;
  • %SystemRoot%\\system32\\mshta.exe;
  • %SystemRoot%\\system32\\rundll32.exe;
  • %SystemRoot%\\system32\\wwahost.exe;
  • %SystemRoot%\\syswow64\\cmd.exe;
  • %SystemRoot%\\syswow64\\regedit.exe;
  • %SystemRoot%\\syswow64\\regedt32.exe;
  • %SystemRoot%\\syswow64\\cscript.exe;
  • %SystemRoot%\\syswow64\\wscript.exe;
  • %SystemRoot%\\syswow64\\msiexec.exe;
  • %SystemRoot%\\syswow64\\mshta.exe;
  • %SystemRoot%\\syswow64\\rundll32.exe;
  • %SystemRoot%\\syswow64\\wwahost.exe.

Page top