Editing Application Control message templates

When a user attempts to start an application that is blocked by an Application Control rule, Kaspersky Endpoint Security displays a message stating that the application is blocked from starting. If the user believes that an application was mistakenly blocked from starting, the user can use the link in the message text to send a message to the local corporate network administrator.

Special templates are available for the message that is displayed when an application is blocked from starting and for the message sent to the administrator. You can modify the message templates.

To edit a message template:

  1. In the main application window, click the Application settings icon in the form of a gear wheel. button.
  2. In the application settings window, select Security Controls → Application Control.
  3. In the Templates of messages about application blocking block, configure templates for Application Control messages:
    • Message about blocking. Template of the message that is displayed when an Application Control rule that blocks an application from starting is triggered. The notification about a blocked application is shown in the figure below.

      You cannot configure message templates for Application Control in test mode. Application Control in test mode displays preset notifications.

    • Message to administrator. Template of the message that a user can send to the corporate LAN administrator if the user believes that an application was blocked by mistake. After the user requests to provide access, Kaspersky Endpoint Security sends an event to Kaspersky Security Center: Application startup blockage message to administrator. The event description contains a message to administrator with substituted variables. You can view these events in the Kaspersky Security Center console using the predefined event selection User requests. If your organization does not have Kaspersky Security Center deployed or there is no connection to the Administration Server, the application will send a message to administrator to the specified email address.
  4. Save your changes.

    Notification about blocked application startup. The user can create a request to launch the application.

    Application Control notification

See also:

Editing templates of Web Control messages

Editing templates of Device Control messages

Editing Adaptive Anomaly Control message templates

Editing templates of encrypted file access messages
Page top