I am using the Symantec provided application control policies "ADP + SEP Hardening.zip" . They have been extremely useful, and have helped to drastically cut down the rate of infection.
However.
I am running into issues with sales staff attempting to legitimately use Webex or GoToMeeting. These sites obviously load DLL's and executables to provide services - I am simply at a loss as to how I can allow them while denying all others... I keep enabling and disabling this rule, as it is too critical to simply turn it off all the time.
Any ideas?
Thanks!