Blacklist in policy's Application control

Hi all,
does anyone know how to exactly use that list ?
Can anyone "direct" me on that feature ? the documentation is not very rich ...
What's the syntax to use ?
May I use wildcard ?
Is it "os" dependent ? iOS ? Android ?
many thanks to you all,
regards,
Pascal

schmatzp wrote:
> does anyone know how to exactly use that list ?
> Can anyone "direct" me on that feature ? the documentation is not very
> rich ...
> What's the syntax to use ?
> May I use wildcard ?
> Is it "os" dependent ? iOS ? Android ?
Actually, yes, it is OS dependent as this feature currently only works
with Windows Mobile. If you're using iOS or Android then just ignore
this policy setting.
We're your Novell--again. http://www.novell.com/promo/backtobasics.html
BrainShare 2013 is coming! http://www.brainshare.com

Similar Messages

  • ZMM 2.5 Policy Suite, Application Control, Whitelisting

    Reference: Novell Documentation: ZENworks Mobile Management - Table of Contents
    The ZMM manuals are not quite clear what they mean by "Whitelisting" under the Policy Suite, Application Control sections. I'm assuming ZMM application "whitelisting" means that only listed apps can run or at least only listed apps can be installed and run. Is assumption correct? Has anyone done this successfully on Android devices with the ZMM agent an enrolled Touchdown? If so, could you provide details on how it was done? Ideally we'd like to take an inventory list of a working device set of applications, add them to the whitelist, and force the user to come to the administrator for new applications, regardless of their google play/alternative market access.
    Thoughts?
    Kevin

    Originally Posted by nop1983
    salisburyk wrote:
    >
    > Reference:
    > 'SureLock for Android | Kiosk Mode Lockdown for Tablets, Smartphones &
    > Rugged Devices' (SureLock for Android | Kiosk Mode Lockdown for Tablets, Smartphones & Rugged Devices)
    >
    > Bryce,
    >
    > Another very interesting product is SureLock for Android - we are
    > testing it to see how it compliments Novell ZMM...
    >
    > Kevin
    This looks like a Endpoint security product for Android, right?
    Niels
    Hi Niels,
    Did you happen see the link? No, the SureLock product allows Application Control/Application whitelisting right on the android device with full administrator control. We wrongly thought ZMM could whitelist Android apps (shame on us - we neglected to test that before we purchased. Lessons learned - give yourself time to test everything in your requirements list prior to purchase). Our initial testing of SureLock went very smoothly, it does not interfere with the ZMM agent or Touchdown. The users see only what you want them to see - apparently even without root access on the android device. We are now using it in conjunction with ZMM on our Mobile devices. There are others that offer similar functionality in conjunction with ZMM - take a look at Clutch Mobile App Protector Pro that is coming soon for iOS as well ( https://www.clutchmobile.com/products/appprotector ). We do not have iOS, so SureLock is fine for our needs in conjunction with ZMM...
    Kevin

  • Application Control Policy white listing

    How do I configure Application Control Policy white listing?
    I can only get blacklisting to work.
    If I create a policy to block *.exe and then allow all the windows executables it doesn't work.
    It looks like wildcards don't work.

    Thanks Brent!
    Note: It is possible to combine the Current ZESM product with Windows
    Software Restriction Policies and get much stronger protection than
    Software Restriction Policies alone. (Both Types of Policies are
    deliverable via ZCM)
    On 4/25/2012 11:46 AM, bbeachem wrote:
    >
    > That documentation refers to the old ZESM 4.1 product that is EOL.
    > We're working to update that documentation. Application White-Listing
    > is currently not supported in the ZESM version integrated into the
    > ZENworks Communication Console. It is being researched for possible
    > inclusion in a future revision.
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Knowledge Partner
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • It policy application control

    Hey, i need some help with removing my applications. Whenever i try to the error pops up and says: It policy application control. When i try to delete the module stuff it says that to. I personally have never ben involved in any company or IT network. Now LONG story short i kind of have a reycled-part blackberry (everything works perfectly except this!), so the IT policy part might of had connections to a IT network at sometime. I tried using the desktop manager to delete the apps, hell i even reset the OS (i did however backup/recover the phone.... could this be the problem?) In conclusion: How do i delete the It policy?
    some info:
    phone: 8310
    Carrier: ATT
    Os: 4.5
    thanks in advance!
    Solved!
    Go to Solution.

    hello, what you need to do is remove the IT policy from the previous life of your Blackberry device.
    You have many tutorials on how to do that here :
    http://www.google.com/search?hl=en&ie=UTF-8&btnG=Google+Search&q=blackberry%20policy.bin
    good luck
    The search box on top-right of this page is your true friend, and the public Knowledge Base too:

  • Application control

    Hi all,
    could you help me with finding the answer for the following question?
    Is it possible in Peoplesoft to have different application controls settings on different client codes within one instance? I'm more familiar with SAP and I'm just trying to discover Peoplesoft more, so I'll use example from SAP. In SAP it's possible to set the 3-way match (Invoice is matched against both the Purchase Order and Goods Receipt) in under one client code, but the setting can be disabled under another client code. Another example would be having set certain reports or configurations differently at different client codes.
    The aim is to know whether I have to review just one settings or have to review settings/configurations for each individual client code.
    Thank you very much in advance.
    Tomas

    1. PeopleSoft dont have code on client side instead it has code on server side.
    2. In PeopleSoft we can do 2 way and 3 way matching, one user settings can be disabled from another user. All these are controlled by PeopleSoft Security
    3. PeopleSoft can set certain reports or configurations differently at different users.
    You can control one user settings from another user but all this is controlled by PeopleSoft Security. It is very powerful application in which you can do many miracles.
    Jayaprakash Tedla

  • Align picture to far left on application control bar

    guys i realise that the application control bar has a 1px padding from each side but is there a way to remove that padding so that i may align the Img right up to the far left of the control bar?
    Any help would be appreciated.

    such a simple solution and i just couldnt think of it. :-) thanks

  • BatteryWatch is requesting changes to its application control permissions

    I am using an ad-supported application called BatteryWatch (1.9.7) and everything used to be fine.
    Now, however, everytime I open it I get the request "BatteryWatch is requesting changes to its application control permissions."
    No matter how I change the permissions, this message ALWAYS appears.
    The strange thing is that it didn't use to happen before.
    Since the time that it was working I have updated the application, updated Blackberry App World and I think the company might have moved onto BES/BIS(?).
    Any idea how I can stop this message appearing?

    Hi and Welcome to the Community!
    If your company indeed did move to BES and if indeed your BB has been activated on BES, then BES could be pushing out specific control permissions that are in conflict with what that app thinks it needs...and BES will win every time. So, when you launch the app, it prompts for a change to the permissions to what it thinks it needs...but, since BES is in control, it can't actually change the permission, and prompts again the next time.
    Basically, there is nothing you can do...BES wins every time.
    Good luck!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Best Web Filter and Application control for K-12 School using Chromebooks

    Sophos UTM has good education pricing and provides all this and a lot more
    Wil replace the firewall and has excellent web filtering and application control
    Also nice features for education like allowing google apps but limiting to your google domain

    We are currently using Barracuda Web Filter (410) with a Watchguard firewall. This school year we are launching Google for Education with 160 Chromebooks to start the program.
    We need to upgrade our webfilter and are considering another Barracuda as well as Litespeed, Websense and perhaps OpenDNS. 
    is there anyone who is in a similar situation that has some recommendation?
    Here are a few more details:
    School is 900+ students
    300 wired workstations
    Active directory environment
    Ruckus Wireless with 30+ access points
    This topic first appeared in the Spiceworks Community

  • BUG: Docked Application Control Bar breaks States

    I've encountered a bug and I haven't noticed messages from
    anyone else about it so I'm assuming it's an unknown:
    If you use an Application Control Bar, set it's dock property
    to true, and then attempt to change the currentState of the
    application to a state that would result in the Application Control
    Bar to be removed; the state change fails.
    Here's an example:
    <?xml version="1.0" encoding="utf-8"?>
    <mx:Application xmlns:mx="
    http://www.adobe.com/2006/mxml"
    layout="absolute">
    <mx:states>
    <mx:State name="problemState">
    <mx:AddChild relativeTo="{textarea1}"
    position="before">
    <mx:Button x="368.5" y="323" label="Goto Base State"
    click="currentState=&quot;&quot;"/>
    </mx:AddChild>
    <mx:AddChild position="lastChild">
    <mx:ApplicationControlBar x="170" y="221" dock="true"
    id="appControlBar">
    </mx:ApplicationControlBar>
    </mx:AddChild>
    <mx:AddChild position="lastChild">
    <mx:Button x="360" y="434" label="Undock Control Bar"
    click="appControlBar.dock = false"/>
    </mx:AddChild>
    <mx:AddChild position="lastChild">
    <mx:Button x="366.5" y="464" label="Dock Control Bar"
    click="appControlBar.dock = true"/>
    </mx:AddChild>
    <mx:AddChild relativeTo="{appControlBar}"
    position="before">
    <mx:TextArea x="229.5" y="403" width="396" height="23"
    editable="false" fontSize="12" fontWeight="bold" textAlign="center"
    id="textarea0">
    <mx:text>Undocking the control bar at runtime fixes
    the problem:</mx:text>
    </mx:TextArea>
    </mx:AddChild>
    <mx:AddChild relativeTo="{appControlBar}"
    position="before">
    <mx:TextArea x="229.5" y="210" width="396" height="105"
    editable="false" fontSize="12" fontWeight="bold" textAlign="center"
    id="textarea2">
    <mx:text>If you try and return to the base state while
    the control bar is docked, the state change will fail. The state
    change will get &quot;stuck&quot; and you'll have to reload
    the Flex application. If there was a third state, you could change
    to that to get out of the lockup, but you still can't transition to
    any state that would remove the docked Application Control
    Bar:</mx:text>
    </mx:TextArea>
    </mx:AddChild>
    </mx:State>
    </mx:states>
    <mx:Button x="358.5" y="135" label="Goto Problem State"
    click="currentState=&quot;problemState&quot;"/>
    <mx:TextArea x="229.5" y="70" width="396" height="57"
    editable="false" fontSize="12" fontWeight="bold" textAlign="center"
    id="textarea1">
    <mx:text>A Docked application control bar prevents
    Flex from changing state to a state that would remove the
    application control bar.</mx:text>
    </mx:TextArea>
    </mx:Application>

    Hi Harry (and others),
    I have seen similar behavior. It seems like the client side rendering for some reason has a hard time processing the collection model wrapping the ArrayList in this particular case. The table renders empty. After sorting in ascending order, the rows are all back (visible) again.
    Is anyone aware of issues with the rich table based directly on ArrayList (in combination with a changing set of values and/or sorting)? (seems like a corner case but is still not uncommon). Is there any indication that wrapping the ArrayList in a CollectionModel ourselves might be required?
    Harry: do you know whether this issue is introduced with PS3 (11.1.1.4) or already existed in previous releases?
    kind regards,
    Lucas

  • ISA 570W - Application control not functioning

    All of a sudden the Application control has ceased to function. I have tried re-booting, resaving settings. I have checked the logs and there are no entries? Any ideas or help is appreciated.
    Firmware: 1.2.20

    Did you ever fix this problem? I'm having the EXACT same problem. Just updated to Lion from Snow Leopard.
    I knew there would be some glitches, since I've had the same user folder since 10.0. Been updating all the way since then. Everyone always says it will break. It never does. I always figure out how to fix it.
    Everyone always wants to nuke the site from orbit. Clean install. That sort of nonsense. Bah.
    A real Mac user figures out how to fix the problem, and fixes it. Only idiots reinstall from scratch.

  • [BUG?] Application Control Policies

    I have had the problem that I first want to locked down everything and than open security step by step.
    But this was not the best idea.
    The problem within the Application Control is the "Search & Find" option or the Filter.
    1. The Window is damn smal and it's not possible to resize.
    2. There are soooooooooooo many settings and options to set and there is no way to export or import. That would be damn cool to set the option within Excel or something like that.
    3. The worst thing is the search or filter option.
    I will give an example:
    When you try to find iPhone than you will get no return. Or give it a try with flash. No way.
    You need to search for the exact application name.
    Can someone change this to a better filter option because this is more than worse to browse through all each setting to find something.

    Hello Jahnke,
    Thank you for the suggestions. While the product is working as designed currently, we will convey your suggestions to the Development team. If those changes are within the scope of the product, it may be implemented in one of the future firmware releases. If you have any further questions, please feel free to reach out to Cisco SBSC and one of our Engineers will be happy to work with you.
    Thanks,
    Nagaraja

  • Ask the Expert: Configuration and Troubleshooting the Cisco Application Control Engine (ACE) load balancer

    With Ajay Kumar and Telmo Pereira 
    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about configuration and troubleshooting the Cisco Application Control Engine (ACE) load balancer with Cisco expert Ajay Kumar and Telmo Pereira. The Cisco ACE Application Control Engine Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers is a next-generation load-balancing and application-delivery solution. A member of the Cisco family of Data Center 3.0 solutions, the module: Helps ensure business continuity by increasing application availability Improves business productivity by accelerating application and server performance Reduces data center power, space, and cooling needs through a virtualized architecture Helps lower operational costs associated with application provisioning and scaling
    Ajay Kumar  is a customer support engineer in the Cisco Technical Assistance Center in Brussels, covering content delivery network technologies including Cisco Application Control Engine, Cisco Wide Area Application Services, Cisco Content Switching Module, Cisco Content Services Switches, and others. He has been with Cisco for more than four years, working with major customers to help resolve their issues related to content products. He holds DCASI and VCP certifications. 
    Telmo Pereira is a customer support engineer in the Cisco Technical Assistance Center in Brussels, where he covers all Cisco content delivery network technologies including Cisco Application Control Engine (ACE), Cisco Wide Area Application Services (WAAS), and Digital Media Suite. He has worked with multiple customers around the globe, helping them solve interesting and often highly complex issues. Pereira has worked in the networking field for more than 7 years. He holds a computer science degree as well as multiple certifications including CCNP, DCASI, DCUCI, and VCP
    Remember to use the rating system to let Ajay know if you have received an adequate response.
    Ajay and Telmo might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Data Center sub-community discussion forum Application Networking shortly after the event.
    This event lasts through July 26, 2013. Visit this forum often to view responses to your questions and the questions of other community members.

    Hello Krzysztof,
    Another set of good/interesting questions posted. Thanks! 
    I will try to clarify your doubts.
    In the output below both resources (proxy-connections and ssl-connections rate) are configured with a min percentage of resources (column Min), while 'Max' is set to equal to the min.
    ACE/Context# show resource usage
                                                         Allocation
            Resource         Current       Peak        Min        Max       Denied
    -- outputs omitted for brevity --
      proxy-connections             0      16358      16358      16358      17872
      ssl-connections rate          0        626        626        626      23204
    Most columns are self explanatory, 'Current' is current usage, 'Peak' is the maximum value reached, and the most important counter to monitor 'Denied' represents the amount of packets denied/dropped due to exceeding the configured limits.
    On the resources themselves, Proxy-connections is simply the amount of proxied connections, in other words all connections handled at layer 7 (SSL connections are proxied, as are any connections with layer 7 load balance policies, or inspection).
    So in this particular case for the proxy-connections we see that Peak is equal to the Max allocated, and as we have denies we can conclude that you have surpassed the limits for this resource. We see there were 17872 connections dropped due to that.
    ssl-connections rate should be read in the same manner, however all values for this resource are in bytes/s, except for Denied counter, that is simply the amount of packets that were dropped due to exceeding this resource. 
    For your particular tests you have allocated a min percentage and set max equal to min, this way you make sure that this context will not use any other additional resources.
    If you had set the max to unlimited during resource allocation, ACE would be allowed to use additional resources on top of those guaranteed, if those resources were available.
    This might sound a great idea, but resource planning on ACE should be done carefully to avoid any sort of oversubscription, specially if you have business critical contexts.
    We have a good reference for ACE resource planning that contains also description of all resources (this will help to understand the output better):
    http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/configuration/virtualization/guide/config.html#wp1008224
    1) When a resource is utilized to its maximum limit, the ACE denies additional requests made by any context for that resource. In other words, the action is to Drop. ACE  should in theory silently drop (No RST is sent back to the client). So unless we changed something on the code, this is what you should see.
    To give more context, seeing resets with SSL connections is not necessarily synonym of drops. As it is usual to see them during normal transactions.
    For instance Microsoft servers are usually ungracefully terminating SSL connections with RESET. Also when there is renegotiation during an SSL transaction you may see RESETS, but this will pass unnoticed for end users. 
    2)  ACE will simply drop/ignore new connections when we reach the maximum amount of proxied connections for that context. Exisiting connections will continue there.
    As ACE doesn't respond back, client would simply retransmit, and if he is lucky maybe in the next attempt he will be able to establish the connection.
    To overcome the denies, you will definitely have to increase the resource allocation. This of course, assuming you are not reaching any physical limit of the box.
    As mentioned setting max as unlimited might work for you, assuming there are a lot of unused resources on the box.
    3)  If a new connection comes in with a sticky value, that matches the sticky entry of a real server, which is already in MAXCONNS state, then both the ACE module/appliance should reject the connection and that sticky entry would be removed.
    The client would at that point reestablish a new connection and ACE would associate a new sticky entry with the flow for a new RSERVER after the loadbalancing decision.
    I hope this makes things clearer! Uff...
    Regards,
    Telmo

  • Side Effects of switching from Application Controlled Workflow to Process

    We have switched our development environmnet from application controlled workflow to process controlled workflow.  We noticed that when we try to pull up old shopping carts that are awaiting approval we get dumps.
    Is this a known issue when converting from application controlled workflow to processing controlled workflow?
    Regards,
    -Paul

    Hi,
    What kind of dump did you get?
    My understanding is it should work if SC is created in SRM 7.0 with AC workflow.
    Regards,
    Masa

  • SRM7.0 Application controlled workflow need Allow/Disallow to edit fields f

    Dear All,
         We using SRM7.0 Application controlled workflow,Now we need Allow/Disallow to edit fields for approver,how to do it,About Process controlled workflow,we can according to the notes 1277921 do it,But Application controlled workflow,I didn't find any notes,Can you help it.

    Hi,
      Here is the SAP help for your reference. Please let us know if you need more information..
    http://help.sap.com/saphelp_srm70/helpdata/en/29/b092ecfcb24b14b7baa225ba13955b/frameset.htm
    Saravanan

  • Approval Index in Application controlled WF

    Hi All
    I am working on Application controlled WF. I created a implementation for the BAdI- BBP_WFL_APPROV_BADI. In the method- GET_REMAING_APPROVERS, one of the importing parameter is ACTUAL_APPROVAL_INDEX.
    While i am creating SC (from portal), if i click on Approval Process Overview button, BAdI is getting with Approval_Index as 000000 and if i order the SC, BAdI is getting with Approval_Index as 000000.
    Please let me know, always the approval index will be 00000 (initially) and do we need to increase the approval index inside the BAdI?
    Vinoth

    Hi,
      you are taking two different things.. ACTUAL_APPROVAL_INDEX is import parameter of the Badi, But Approval_Index is part of the approval_table which is exporting parameter of the Baid..
    the approval index must be increased based on number of level you wants the sc to be approved..for an example..
    you want a SC to  be approved by 4 levels of approver's then the approval_table must be appended as follows
    approval_index = 1
    1st approver details.
    approval_index = 2
    2nd approver details.
    approval_index = 3
    3rd approver details.
    approval_index = 4
    4th approver details.
    ACTUAL_APPROVAL_INDEX is import parameter of the Badi is update dynamically once the approver take the decision for an example.. Assume that the 3rd level approver approve the sc.. now the ACTUAL_APPROVAL_INDEX is 3..
    Saravanan

Maybe you are looking for