cancel
Showing results for 
Search instead for 
Did you mean: 
a2wa2
Level 8
Report Inappropriate Content
Message 1 of 3

Insert new applications into white list

hello

I have a question about inventory, now I add 1 system for the application control and It knows about 4000 number of applications, but I need to add 200 systems but

I really concern  about number of trusted applications and I think it limits Users from installing their own applications and new apps.because it is difficult to handle it from epo. what should I do to update users?after installing new application how can I insert application in the whitelist from epo?

2 Replies
Reliable Contributor Troja
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: Insert new applications into white list

Hello ​,

this is the solution design of MAC to prevent installations and modifications or the execution of unknown PEs.

One of the most important things when using MAC is to know or define how systems should be updated in the future. If not, or if any user should be able to install software, MAC makes no sense.

Are you familiar with the difference between binaries, updater and installers??

  • If you want to add binaries to the whitelist (this means a file is allowed to be executed) you can do this using the policy. Just add the necessary binaries to the policy in EPO and afterwards the whitelist on any endpoint is updated. Important, the Executable is allowed to be executed, but it is not allowed to install software. E.g. a setup.exe for a specific software.
  • To update the system you have to configure trusted updaters. These Updaters are allowed to modify the system. Common updaters could be a firefox updates, chrome updates, windows update and so on.

Form my point of view or from my point of experience, take some time to read the Best Practices Guides and take a look how Application Control works. Take a look at your internal processes.

McAfee Corporate KB - Application Control security best practices KB85337

McAfee Corporate KB - Application Control 6.2.0 Best Practices Guide PD25620

McAfee Corporate KB - Application Control 7.0.0 Best Practices Guide PD26171

McAfee Corporate KB - McAfee Application Control 8.0.0 Best Practices Guide PD26726

Hope this helps,

Cheers

a2wa2
Level 8
Report Inappropriate Content
Message 3 of 3

Re: Insert new applications into white list

thanks,

but my problem is that how can I update white list? whenever I need to install some applications from internet on my system, it allows me to install it but when I want to execute it does not allow me. then I execute sc: disable and after that I can execute it.but when I execute sc: begin update and sc: end update and then back to sc:enable it does not allow me to execute it again.Did I do right for the update process?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community