Action on starting applications blocked by rules

The action that Kaspersky Embedded Systems Security performs upon detecting an attempt to start an application that matches the configured rules:

• Test rules. If you select this option, Kaspersky Embedded Systems Security tests the rules and generates an event about an attempt to start an application that matches the rules.
• Apply rules (default value). If you select this option, Kaspersky Embedded Systems Security applies Application Control rules and performs the action specified in the rules.

Trust applications signed by a trusted certificate / Do not trust applications signed by a trusted certificate

This toggle switch enables or disables the use of the trusted certificate list by Application Control. When the toggle switch is enabled, Application Control in allowlist mode does not block applications that are signed with trusted certificates.

This option is available if the Application Control setting is set to Allowlist.

The Manage Application Control trusted certificates link opens a window in which you can configure the list of trusted certificates for Application Control.

Applying rules

In the drop-down list, you can select how rules are added:

• Replace local rules with policy rules. When you select this item, the application applies only the rules specified in the policy.
• Add policy rules to local rules (default value). When you select this item, the application applies the rules specified in the policy together with the local rules configured on the protected device.

Status

Operation status of the Application Control rule:

• Enabled – the rule is enabled, Application Control applies this rule during operation.
• Disabled – the rule is disabled and is not used when the Application Control is running.
• Test – Application Control allows launching applications that meet the rule criteria, but logs information about launches of these applications in the report.

Status

You can select the operation status of the Application Control rule:

• Enabled – the rule is enabled, Application Control applies this rule during operation.
• Disabled – the rule is disabled and is not used when the Application Control is running.
• Test – Application Control allows launching applications that meet the rule criteria, but logs information about launches of these applications in the report.

Users and their rights

The table contains a list of users or user groups to which the Application Control rule applies, and the types of access assigned to them, and consists of the following columns:

• User or group name – names of users or names of user groups to which the Application Control rule applies.
• Access – access type (allow or block launching applications). This toggle button switches access type: Allow launching the applications or Block launching the applications.

   

You can add, edit, and delete users or user groups.

Add

Clicking the button starts the category creation wizard. Follow the instructions of the Wizard.

For details about creating a category, refer to the Kaspersky Security Center Help.

Remove

Clicking the button deletes the selected category. The Golden Image (local) category cannot be deleted.

List of users and groups

If this option is selected, in the search field you can enter search criteria for the name of the user or name of the user group, to which the Application Control rule will apply, or you can select the name of the user group in the list below.