Importing Standard File Definitions
You can use standard Microsoft file definitions to quickly build a central file authorization list for executable files, macros, and scripts.
- From the Management Console, select Tools > Import Standard File Definitions.
The Import Standard File Definitions dialog opens.
- Click Add.
The Open dialog opens and displays files with an .sfd extension.
- Select the standard definition file(s) to import.
- Click Open.
The file(s) are shown in the Add window.
- Select one or more of the following options:
- Click Import.
- After importing standard file definitions, click OK.
- Click Close.
Tip: You can import standard file definitions from the Self-Service Portal by downloading to a local computer and unzipping the archived files.
|Assign File Groups to Well Known Users Automatically||Assigns the executable files, scripts, and macros found in the scan to the system users/groups.|
|Process Known Files Automatically||The wizard adds the file to the database if they have the same name but different digital signature.|
|Import SFD with file hashes and create predefined File Groups:||Ivanti Device and Application Control automatically imports standard file definition digital signatures, then creates and assigns the files to predefined file groups.|
|Import SFD without file hashes and create predefined File Groups:||Predefined file groups for standard file definitions are created but no digital signatures are imported. Ivanti Device and Application Control partially assists you by identifying file names and proposing file groups for authorization during scanning.|
The designated standard file definitions are now authorized and assigned to respective predefined file groups and system users/groups.
Caution: When you import standard file definitions, you should authorize logon and boot files. If these are not authorized, the system will not work properly. This is especially important for system updates.
After Completing This Task
Assign the imported predefined file groups to users/groups, if you did not select the Assign File Groups to Well Known User Automatically option.