ZMM 2.5 Policy Suite, Application Control, Whitelisting

Reference: Novell Documentation: ZENworks Mobile Management - Table of Contents
The ZMM manuals are not quite clear what they mean by "Whitelisting" under the Policy Suite, Application Control sections. I'm assuming ZMM application "whitelisting" means that only listed apps can run or at least only listed apps can be installed and run. Is assumption correct? Has anyone done this successfully on Android devices with the ZMM agent an enrolled Touchdown? If so, could you provide details on how it was done? Ideally we'd like to take an inventory list of a working device set of applications, add them to the whitelist, and force the user to come to the administrator for new applications, regardless of their google play/alternative market access.
Thoughts?
Kevin

Originally Posted by nop1983
salisburyk wrote:
>
> Reference:
> 'SureLock for Android | Kiosk Mode Lockdown for Tablets, Smartphones &
> Rugged Devices' (SureLock for Android | Kiosk Mode Lockdown for Tablets, Smartphones & Rugged Devices)
>
> Bryce,
>
> Another very interesting product is SureLock for Android - we are
> testing it to see how it compliments Novell ZMM...
>
> Kevin
This looks like a Endpoint security product for Android, right?
Niels
Hi Niels,
Did you happen see the link? No, the SureLock product allows Application Control/Application whitelisting right on the android device with full administrator control. We wrongly thought ZMM could whitelist Android apps (shame on us - we neglected to test that before we purchased. Lessons learned - give yourself time to test everything in your requirements list prior to purchase). Our initial testing of SureLock went very smoothly, it does not interfere with the ZMM agent or Touchdown. The users see only what you want them to see - apparently even without root access on the android device. We are now using it in conjunction with ZMM on our Mobile devices. There are others that offer similar functionality in conjunction with ZMM - take a look at Clutch Mobile App Protector Pro that is coming soon for iOS as well ( https://www.clutchmobile.com/products/appprotector ). We do not have iOS, so SureLock is fine for our needs in conjunction with ZMM...
Kevin

Similar Messages

Blacklist in policy's Application control

Hi all,
does anyone know how to exactly use that list ?
Can anyone "direct" me on that feature ? the documentation is not very rich ...
What's the syntax to use ?
May I use wildcard ?
Is it "os" dependent ? iOS ? Android ?
many thanks to you all,
regards,
Pascal

schmatzp wrote:
> does anyone know how to exactly use that list ?
> Can anyone "direct" me on that feature ? the documentation is not very
> rich ...
> What's the syntax to use ?
> May I use wildcard ?
> Is it "os" dependent ? iOS ? Android ?
Actually, yes, it is OS dependent as this feature currently only works
with Windows Mobile. If you're using iOS or Android then just ignore
this policy setting.
We're your Novell--again. http://www.novell.com/promo/backtobasics.html
BrainShare 2013 is coming! http://www.brainshare.com

It policy application control

Hey, i need some help with removing my applications. Whenever i try to the error pops up and says: It policy application control. When i try to delete the module stuff it says that to. I personally have never ben involved in any company or IT network. Now LONG story short i kind of have a reycled-part blackberry (everything works perfectly except this!), so the IT policy part might of had connections to a IT network at sometime. I tried using the desktop manager to delete the apps, hell i even reset the OS (i did however backup/recover the phone.... could this be the problem?) In conclusion: How do i delete the It policy?
some info:
phone: 8310
Carrier: ATT
Os: 4.5
thanks in advance!
Solved!
Go to Solution.

hello, what you need to do is remove the IT policy from the previous life of your Blackberry device.
You have many tutorials on how to do that here :
http://www.google.com/search?hl=en&ie=UTF-8&btnG=Google+Search&q=blackberry%20policy.bin
good luck
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Application Control Policy white listing

How do I configure Application Control Policy white listing?
I can only get blacklisting to work.
If I create a policy to block *.exe and then allow all the windows executables it doesn't work.
It looks like wildcards don't work.

Thanks Brent!
Note: It is possible to combine the Current ZESM product with Windows
Software Restriction Policies and get much stronger protection than
Software Restriction Policies alone. (Both Types of Policies are
deliverable via ZCM)
On 4/25/2012 11:46 AM, bbeachem wrote:
>
> That documentation refers to the old ZESM 4.1 product that is EOL.
> We're working to update that documentation. Application White-Listing
> is currently not supported in the ZESM version integrated into the
> ZENworks Communication Console. It is being researched for possible
> inclusion in a future revision.
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Ask the Expert: Configuration and Troubleshooting the Cisco Application Control Engine (ACE) load balancer

With Ajay Kumar and Telmo Pereira
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about configuration and troubleshooting the Cisco Application Control Engine (ACE) load balancer with Cisco expert Ajay Kumar and Telmo Pereira. The Cisco ACE Application Control Engine Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers is a next-generation load-balancing and application-delivery solution. A member of the Cisco family of Data Center 3.0 solutions, the module: Helps ensure business continuity by increasing application availability Improves business productivity by accelerating application and server performance Reduces data center power, space, and cooling needs through a virtualized architecture Helps lower operational costs associated with application provisioning and scaling
Ajay Kumar is a customer support engineer in the Cisco Technical Assistance Center in Brussels, covering content delivery network technologies including Cisco Application Control Engine, Cisco Wide Area Application Services, Cisco Content Switching Module, Cisco Content Services Switches, and others. He has been with Cisco for more than four years, working with major customers to help resolve their issues related to content products. He holds DCASI and VCP certifications.
Telmo Pereira is a customer support engineer in the Cisco Technical Assistance Center in Brussels, where he covers all Cisco content delivery network technologies including Cisco Application Control Engine (ACE), Cisco Wide Area Application Services (WAAS), and Digital Media Suite. He has worked with multiple customers around the globe, helping them solve interesting and often highly complex issues. Pereira has worked in the networking field for more than 7 years. He holds a computer science degree as well as multiple certifications including CCNP, DCASI, DCUCI, and VCP
Remember to use the rating system to let Ajay know if you have received an adequate response.
Ajay and Telmo might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Data Center sub-community discussion forum Application Networking shortly after the event.
This event lasts through July 26, 2013. Visit this forum often to view responses to your questions and the questions of other community members.

Hello Krzysztof,
Another set of good/interesting questions posted. Thanks!
I will try to clarify your doubts.
In the output below both resources (proxy-connections and ssl-connections rate) are configured with a min percentage of resources (column Min), while 'Max' is set to equal to the min.
ACE/Context# show resource usage
                                                     Allocation
        Resource         Current       Peak        Min        Max       Denied
-- outputs omitted for brevity --
proxy-connections             0      16358      16358      16358      17872
ssl-connections rate          0        626        626        626      23204
Most columns are self explanatory, 'Current' is current usage, 'Peak' is the maximum value reached, and the most important counter to monitor 'Denied' represents the amount of packets denied/dropped due to exceeding the configured limits.
On the resources themselves, Proxy-connections is simply the amount of proxied connections, in other words all connections handled at layer 7 (SSL connections are proxied, as are any connections with layer 7 load balance policies, or inspection).
So in this particular case for the proxy-connections we see that Peak is equal to the Max allocated, and as we have denies we can conclude that you have surpassed the limits for this resource. We see there were 17872 connections dropped due to that.
ssl-connections rate should be read in the same manner, however all values for this resource are in bytes/s, except for Denied counter, that is simply the amount of packets that were dropped due to exceeding this resource.
For your particular tests you have allocated a min percentage and set max equal to min, this way you make sure that this context will not use any other additional resources.
If you had set the max to unlimited during resource allocation, ACE would be allowed to use additional resources on top of those guaranteed, if those resources were available.
This might sound a great idea, but resource planning on ACE should be done carefully to avoid any sort of oversubscription, specially if you have business critical contexts.
We have a good reference for ACE resource planning that contains also description of all resources (this will help to understand the output better):
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/configuration/virtualization/guide/config.html#wp1008224
1) When a resource is utilized to its maximum limit, the ACE denies additional requests made by any context for that resource. In other words, the action is to Drop. ACE should in theory silently drop (No RST is sent back to the client). So unless we changed something on the code, this is what you should see.
To give more context, seeing resets with SSL connections is not necessarily synonym of drops. As it is usual to see them during normal transactions.
For instance Microsoft servers are usually ungracefully terminating SSL connections with RESET. Also when there is renegotiation during an SSL transaction you may see RESETS, but this will pass unnoticed for end users.
2) ACE will simply drop/ignore new connections when we reach the maximum amount of proxied connections for that context. Exisiting connections will continue there.
As ACE doesn't respond back, client would simply retransmit, and if he is lucky maybe in the next attempt he will be able to establish the connection.
To overcome the denies, you will definitely have to increase the resource allocation. This of course, assuming you are not reaching any physical limit of the box.
As mentioned setting max as unlimited might work for you, assuming there are a lot of unused resources on the box.
3) If a new connection comes in with a sticky value, that matches the sticky entry of a real server, which is already in MAXCONNS state, then both the ACE module/appliance should reject the connection and that sticky entry would be removed.
The client would at that point reestablish a new connection and ACE would associate a new sticky entry with the flow for a new RSERVER after the loadbalancing decision.
I hope this makes things clearer! Uff...
Regards,
Telmo

Deploying EJB, JSF to soa suite application server

Hello,
I have a problem using EJB. I deployed my JSF page to my soa suite application server. But I think something is wrong between the communication of my page and the Bean. I keep getting the error :
BO-29000: Unexpected exception caught: oracle.jbo.JboException, msg=JBO-29000: Unexpected exception caught
: javax.naming.NameNotFoundException, msg=HRFacade not found
where HRFacade is the name of my bean. I'm very new to EJB but I want to learn how to use it within ADF and a soa suite application server (some that is NOT localhost :p). Could someone tell me what I do wrong. What is connecting EJB's to the pages. Should I use JNDI? A good course available on the internet is also welcome.
Thanks for the replys

Oké, little update. I let the message rest for a while and start with a new project. New problem :
First I created a new Session Bean. Within this bean I declared a string message();
In my bean self I returned "Hello World!" like you can see
package org.EJBEx1.datamodel;
import javax.ejb.Stateless;
@Stateless(name="Bean")
public class BeanBean implements Bean, BeanLocal {
public BeanBean() {
public String message() {
return "Hello World!";
Now I created a remote data control for this bean and I dragged Bean.Message.String to my JSP. My JSP creates a label witch is bind to #{bindings.message1.label}
What I want to do is just when I open a new browser the label should contain: 'Hello World!' But when I open a browser the label contains : 'message_Return'. Could someone help me. I understand this is basics so please. After I've successfully deployed this new exersise I will see if my error still is the same on my application server. If it works I will post it.
Thnx

Unable to start Oracle Application Testing Suite Application service

Hi ,
I have installed OATS 9.1 successfully on my machine , but there is some problem in starting Oracle Application Testing Suite Application Service .
I am not able to access Oracle Test Manager , when i start the service manually it gives "Error 1053: The service did not respond to the start or control request in a timely fashion" error message .
Is there any explicit setting required after installation to start the service .
Please help me to get out of this problem .
Thanks in Advance.

Hi,
Is the Oracle XE service running? Did the database install go OK? Is there anything in the log files in c:\oracleats\logs to give us a hint - check out wls_oats.log and others in this location.
Regards,
Jamie

Run standalone applications on E-Business Suite Application Server

Hi,
Environment Details:
Database - 10.2.0.3
Apps. - 12.0.3
We have a 6i client-server Forms & Reports application that we want to web-enable. This is a standalone application that has no integration with the E-Business Suite. We would like to use the E-Business Suite application server forms and reports servers to run this application too.
I had two questions:
1. Are there any documents available that would document best practices for such a scenario?
2. Is it possible to create a standalone report server on the E-Business Suite reports server or is there a way to integrate the standalone application reports with the EBS report server?
Thanks,
Ramesh

Ramesh wrote:
Hi,
Environment Details:
Database - 10.2.0.3
Apps. - 12.0.3
We have a 6i client-server Forms & Reports application that we want to web-enable. This is a standalone application that has no integration with the E-Business Suite. We would like to use the E-Business Suite application server forms and reports servers to run this application too.Since you are on R12, you need to use Developer 10g (since Developer 6i is not certified with R12).
Using the OracleAS 10.1.2 Forms and Reports Builders with Oracle Applications Release 12 [ID 444248.1]
How To Bring Up 10G Forms Builder In R12 Environment? [ID 579318.1]
How To Upgrade 11i Custom Forms To R12 [ID 563258.1]
Accessing Custom Forms After Upgrading From To R12. [ID 451934.1]
I had two questions:
1. Are there any documents available that would document best practices for such a scenario?Yes.
https://forums.oracle.com/forums/search.jspa?threadID=&q=Custom+AND+Top+AND+R12&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
https://forums.oracle.com/forums/search.jspa?threadID=&q=Custom+AND+Forms+AND+R12&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Oracle E-Business Suite Developer's Guide
http://docs.oracle.com/cd/E18727_01/doc.121/e12897/toc.htm
2. Is it possible to create a standalone report server on the E-Business Suite reports server or is there a way to integrate the standalone application reports with the EBS report server?Register your reports as concurrent programs and let the concurrent manager take care of the processing.
http://docs.oracle.com/cd/E18727_01/doc.121/e12893/toc.htm
http://docs.oracle.com/cd/E18727_01/doc.121/e12897/toc.htm
Thanks,
Hussein

Application control

Hi all,
could you help me with finding the answer for the following question?
Is it possible in Peoplesoft to have different application controls settings on different client codes within one instance? I'm more familiar with SAP and I'm just trying to discover Peoplesoft more, so I'll use example from SAP. In SAP it's possible to set the 3-way match (Invoice is matched against both the Purchase Order and Goods Receipt) in under one client code, but the setting can be disabled under another client code. Another example would be having set certain reports or configurations differently at different client codes.
The aim is to know whether I have to review just one settings or have to review settings/configurations for each individual client code.
Thank you very much in advance.
Tomas

1. PeopleSoft dont have code on client side instead it has code on server side.
2. In PeopleSoft we can do 2 way and 3 way matching, one user settings can be disabled from another user. All these are controlled by PeopleSoft Security
3. PeopleSoft can set certain reports or configurations differently at different users.
You can control one user settings from another user but all this is controlled by PeopleSoft Security. It is very powerful application in which you can do many miracles.
Jayaprakash Tedla

Need clarification on Solaris 10 upgrade for E Business suite application

Hi All,
Server details :
(1)Database tier : Sun Solaris 8 - 64 Bit
(2)Application tier ( E Business suite application services ): Sun Solaris 8 - 64 Bit
(3)Application tier ( E Business suite External tier - DMZ configuration ) : Sun Solaris 8 - 64 Bit
(4)10gAS and discoverer : Sun Solaris 8 - 64 Bit
We are planning to upgrade the Database tier (1) and Application tier (2) to Sun solaris 10 and leave the Application tier {
External - DMZ configuration } ( 3) and 10gAS and discoverer ( 4 ) with Sun
solaris 8 .
Please let us know if we will be having issues if we perform the OS upgrade in such a way.
Thanks & Regards,
Rakesh

Rakesh,
There should be no issues with this upgrade path. Just make sure you relink all binaries after an OS Upgrade to ensure that everything is working as expected.
- Take a backup of the application/database
- Upgrade the OS
- Relink all binaries
- Start up the application/database
- Take another backup once you confirm that everything works properly
Note: 356878.1 - How to relink the whole Applications 11i Installation
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=356878.1
Note: 131321.1 - How to Relink Oracle Database Software on UNIX
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=131321.1
Note: 407055.1 - Process To Upgrade the Operating System and Oracle Database Server
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=407055.1
Regards,
Hussein

Align picture to far left on application control bar

guys i realise that the application control bar has a 1px padding from each side but is there a way to remove that padding so that i may align the Img right up to the far left of the control bar?
Any help would be appreciated.

such a simple solution and i just couldnt think of it. :-) thanks

BatteryWatch is requesting changes to its application control permissions

I am using an ad-supported application called BatteryWatch (1.9.7) and everything used to be fine.
Now, however, everytime I open it I get the request "BatteryWatch is requesting changes to its application control permissions."
No matter how I change the permissions, this message ALWAYS appears.
The strange thing is that it didn't use to happen before.
Since the time that it was working I have updated the application, updated Blackberry App World and I think the company might have moved onto BES/BIS(?).
Any idea how I can stop this message appearing?

Hi and Welcome to the Community!
If your company indeed did move to BES and if indeed your BB has been activated on BES, then BES could be pushing out specific control permissions that are in conflict with what that app thinks it needs...and BES will win every time. So, when you launch the app, it prompts for a change to the permissions to what it thinks it needs...but, since BES is in control, it can't actually change the permission, and prompts again the next time.
Basically, there is nothing you can do...BES wins every time.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Best Web Filter and Application control for K-12 School using Chromebooks

Sophos UTM has good education pricing and provides all this and a lot more
Wil replace the firewall and has excellent web filtering and application control
Also nice features for education like allowing google apps but limiting to your google domain

We are currently using Barracuda Web Filter (410) with a Watchguard firewall. This school year we are launching Google for Education with 160 Chromebooks to start the program.
We need to upgrade our webfilter and are considering another Barracuda as well as Litespeed, Websense and perhaps OpenDNS.
is there anyone who is in a similar situation that has some recommendation?
Here are a few more details:
School is 900+ students
300 wired workstations
Active directory environment
Ruckus Wireless with 30+ access points
This topic first appeared in the Spiceworks Community

BUG: Docked Application Control Bar breaks States

I've encountered a bug and I haven't noticed messages from
anyone else about it so I'm assuming it's an unknown:
If you use an Application Control Bar, set it's dock property
to true, and then attempt to change the currentState of the
application to a state that would result in the Application Control
Bar to be removed; the state change fails.
Here's an example:
<?xml version="1.0" encoding="utf-8"?>
<mx:Application xmlns:mx="
http://www.adobe.com/2006/mxml"
layout="absolute">
<mx:states>
<mx:State name="problemState">
<mx:AddChild relativeTo="{textarea1}"
position="before">
<mx:Button x="368.5" y="323" label="Goto Base State"
click="currentState="""/>
</mx:AddChild>
<mx:AddChild position="lastChild">
<mx:ApplicationControlBar x="170" y="221" dock="true"
id="appControlBar">
</mx:ApplicationControlBar>
</mx:AddChild>
<mx:AddChild position="lastChild">
<mx:Button x="360" y="434" label="Undock Control Bar"
click="appControlBar.dock = false"/>
</mx:AddChild>
<mx:AddChild position="lastChild">
<mx:Button x="366.5" y="464" label="Dock Control Bar"
click="appControlBar.dock = true"/>
</mx:AddChild>
<mx:AddChild relativeTo="{appControlBar}"
position="before">
<mx:TextArea x="229.5" y="403" width="396" height="23"
editable="false" fontSize="12" fontWeight="bold" textAlign="center"
id="textarea0">
<mx:text>Undocking the control bar at runtime fixes
the problem:</mx:text>
</mx:TextArea>
</mx:AddChild>
<mx:AddChild relativeTo="{appControlBar}"
position="before">
<mx:TextArea x="229.5" y="210" width="396" height="105"
editable="false" fontSize="12" fontWeight="bold" textAlign="center"
id="textarea2">
<mx:text>If you try and return to the base state while
the control bar is docked, the state change will fail. The state
change will get "stuck" and you'll have to reload
the Flex application. If there was a third state, you could change
to that to get out of the lockup, but you still can't transition to
any state that would remove the docked Application Control
Bar:</mx:text>
</mx:TextArea>
</mx:AddChild>
</mx:State>
</mx:states>
<mx:Button x="358.5" y="135" label="Goto Problem State"
click="currentState="problemState""/>
<mx:TextArea x="229.5" y="70" width="396" height="57"
editable="false" fontSize="12" fontWeight="bold" textAlign="center"
id="textarea1">
<mx:text>A Docked application control bar prevents
Flex from changing state to a state that would remove the
application control bar.</mx:text>
</mx:TextArea>
</mx:Application>

Hi Harry (and others),
I have seen similar behavior. It seems like the client side rendering for some reason has a hard time processing the collection model wrapping the ArrayList in this particular case. The table renders empty. After sorting in ascending order, the rows are all back (visible) again.
Is anyone aware of issues with the rich table based directly on ArrayList (in combination with a changing set of values and/or sorting)? (seems like a corner case but is still not uncommon). Is there any indication that wrapping the ArrayList in a CollectionModel ourselves might be required?
Harry: do you know whether this issue is introduced with PS3 (11.1.1.4) or already existed in previous releases?
kind regards,
Lucas

ISA 570W - Application control not functioning

All of a sudden the Application control has ceased to function. I have tried re-booting, resaving settings. I have checked the logs and there are no entries? Any ideas or help is appreciated.
Firmware: 1.2.20

Did you ever fix this problem? I'm having the EXACT same problem. Just updated to Lion from Snow Leopard.
I knew there would be some glitches, since I've had the same user folder since 10.0. Been updating all the way since then. Everyone always says it will break. It never does. I always figure out how to fix it.
Everyone always wants to nuke the site from orbit. Clean install. That sort of nonsense. Bah.
A real Mac user figures out how to fix the problem, and fixes it. Only idiots reinstall from scratch.

ZMM 2.5 Policy Suite, Application Control, Whitelisting

Similar Messages

Maybe you are looking for