cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Nabs
Level 8
Report Inappropriate Content
Message 1 of 2

ePO Application Control - create whitelist

Jump to solution

Hello

I am trying to lock down systems and thus allow only allowed applications to run and to block running of all executables, applications and programs by default.

So basically, as soon as application control is applied on a system it should block all applications by default and only allow those in the whitelist to run.

What I have noticed is I can get the inventory and then list out which programs to block. however if a user install a new program he will be able to run it without any issues due to it not being in the banned list.

so the question is how to block all programs by default and then create a whitelist?

Thanks 

1 Solution

Accepted Solutions
Dayananda
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: ePO Application Control - create whitelist

Jump to solution


Hello,

Thank you for posting on the community.

After installing Solidcore, you have to add the license and then solidify the system in update/observe mode, and then you have to enable the solidcore.

These steps will block running of new exe on the system.

Refer below link on how to perform this.
Enable Application Control
https://docs.mcafee.com/bundle/application-control-8.0.0-product-guide-epolicy-orchestrator/page/GUI...

Enable the Solidcore client
https://docs.mcafee.com/bundle/application-control-8.1.0-windows-installation-guide-epolicy-orchestr...

You can also watch below video for more clarity.

https://www.youtube.com/watch?v=5_oQj6zoq8s&ab_channel=McAfeeSupport

 

I hope this helps.

Let us know if you have any queries.

I look forward to your reply.

Regards,
Daya

View solution in original post

1 Reply
Dayananda
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: ePO Application Control - create whitelist

Jump to solution


Hello,

Thank you for posting on the community.

After installing Solidcore, you have to add the license and then solidify the system in update/observe mode, and then you have to enable the solidcore.

These steps will block running of new exe on the system.

Refer below link on how to perform this.
Enable Application Control
https://docs.mcafee.com/bundle/application-control-8.0.0-product-guide-epolicy-orchestrator/page/GUI...

Enable the Solidcore client
https://docs.mcafee.com/bundle/application-control-8.1.0-windows-installation-guide-epolicy-orchestr...

You can also watch below video for more clarity.

https://www.youtube.com/watch?v=5_oQj6zoq8s&ab_channel=McAfeeSupport

 

I hope this helps.

Let us know if you have any queries.

I look forward to your reply.

Regards,
Daya

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community