Endpoint Protection

 View Only
  • 1.  Network Application Monitoring

    Posted Aug 24, 2010 10:47 AM

    I'm testing this feature and trying to find out how I can see networked and non-networked applications? Under Policies ---> Search for Applications, I can see the learned applications list but how do I determine what's networked and non-networked?


  • 2.  RE: Network Application Monitoring

    Posted Aug 24, 2010 10:56 AM
    You can configure the client to detect and monitor any application that runs on the client computer and that is networked. Network applications send and receive traffic. The client detects whether an application's content changes

    To set up network application monitoring

    1 In the console, click Clients.

    2 Under View Clients, select a group, and then click Policies.

    3 On the Policies tab, under Location-independent Policies and Settings, click
    Network Application Monitoring.
    Customizing Network Threat Protection
    Setting up network application monitoring

    4 In the Network Application Monitoring for group name dialog box, click
    Enable Network Application Monitoring.

    5 In the When an application change is detected drop-down list, select the
    action that the firewall takes on the application that runs on the client:

    ■ Ask
    Asks the user to allow or block the application.
    ■ Block the traffic
    Blocks the application from running.
    ■ Allow and Log
    Allows the application to run and records the information in the Security

    Log.
    The firewall takes this action on the applications that have been modified
    only.

    6 If you selected Ask, click Additional Text.
     
    7 In the Additional Text dialog box, type the text that you want to appear under the standard message, and then click OK.

    8 To exclude an application from being monitored, under Unmonitored 
    Application List, do one of the following actions:
    ■ To define an application manually, click Add, fill out one or more fields,
    and then click OK.


    The learned applications list monitors both networked and non-networked
    applications. You must select networked applications only from the learned
    applications list. After you have added applications to the Unmonitored
    Applications List, you can enable, disable, edit, or delete them.

    9 To enable or disable an application, check the check box in the Enabled
    column.
    10 Click OK.


  • 3.  RE: Network Application Monitoring

    Posted Aug 24, 2010 11:04 AM

    Yes, I read this in the guide, which is why I posted.

    I don't see anywhere to select  networked applications in the learned applications list


  • 4.  RE: Network Application Monitoring

    Posted Aug 24, 2010 11:17 AM
    Have you gone through this option.




  • 5.  RE: Network Application Monitoring

    Posted Aug 24, 2010 11:21 AM
    good question Brian :)


  • 6.  RE: Network Application Monitoring

    Posted Aug 24, 2010 11:23 AM

    Sandip - Yes, I did. Are those options specifically related to networked applications though?