Application blocking

One of the best ways to protect endpoints from malware is with application blocking. When this is enabled, only white-listed applications can run. Application blocking is managed through agent settings. You should consider having a separate agent setting for devices needing application blocking, since you man not want to block applications on servers, for example.

If you don't want all devices to block the same applications, you can create custom blocked application groups. For example, perhaps one department needs one set of applications blocked, and a different department needs a different set of applications blocked.

For detailed information and a video covering these scenarios, visit the Ivanti Community:

• How to use Application Blocking in LDMS Patch and Compliance Manager
• The Definitive Guide to Ivanti Endpoint Security
• Video--Blocking Applications

To enable application blocking in agent settings

1. Click Tools > Configuration > Agent settings > Distribution and Patch. Create a new agent setting there or edit an existing one.
2. Click Patch-only settings > Scan options. Select the Blocked applications option.
   
   
3. Click Save.

To configure blocked applications

1. Click Tools > Security and compliance > Patch and compliance.
2. On the toolbar, switch to the Blocked applications view.
   
3. If you haven't already, update the blocked applications list. Click the Download updates toolbar button. Click Windows > Security and select Applications to block. Click Download now.
4. Once the applications to block list finishes downloading, in the Blocked applications tree click Unassigned to see the list of blockable applications.
5. Select the applications you want to block in the Unassigned list and move them to the Block tree.
6. The selected applications will now be blocked on devices.

Changes to the Block tree take effect on managed devices the next time the vulnerability scanner runs.