About App Control Policy Creation

The configuration method on the POLICY | Security Services > App Control page allows granular control of specific categories, applications, or signatures. This includes granular logging control, granular inclusion and exclusion of users, groups, or IP address ranges, and schedule configuration. The settings here are global policies and independent from any custom App Rules policy.

You can configure the following settings on this page

• Select a category, an application, or a signature.
• Select blocking, logging, or both as the action.
• Specify users, groups, or IP address ranges to include in or exclude from the action.
• Set a schedule for enforcing the controls.

This allows you to use the wide array of actions and other configuration settings available with App Rules. See About Application List Objects for more information about this policy-based user interface for App Rules.