ePO Application Control - create whitelist

[Nabs]

Hello

I am trying to lock down systems and thus allow only allowed applications to run and to block running of all executables, applications and programs by default.

So basically, as soon as application control is applied on a system it should block all applications by default and only allow those in the whitelist to run.

What I have noticed is I can get the inventory and then list out which programs to block. however if a user install a new program he will be able to run it without any issues due to it not being in the banned list.

so the question is how to block all programs by default and then create a whitelist?

Thanks 

[Dayananda · Accepted solution]

Hello,

Thank you for posting on the community.

After installing Solidcore, you have to add the license and then solidify the system in update/observe mode, and then you have to enable the solidcore.

These steps will block running of new exe on the system.

Refer below link on how to perform this.
Enable Application Control
https://docs.mcafee.com/bundle/application-control-8.0.0-product-guide-epolicy-orchestrator/page/GUI...

Enable the Solidcore client
https://docs.mcafee.com/bundle/application-control-8.1.0-windows-installation-guide-epolicy-orchestr...

You can also watch below video for more clarity.

https://www.youtube.com/watch?v=5_oQj6zoq8s&ab_channel=McAfeeSupport

I hope this helps.

Let us know if you have any queries.

I look forward to your reply.