F-SECURE CLIENT SECURITY 7.00, Administrator'S Manual

Page: 171 / 315

CHAPTER 5 171
5.4 Configuring System Control
F-Secure System Control is a new, host-based intrusion prevention
system that analyzes the behavior of files and programs. It can be used to
block intrusive ad pop-ups and to protect important system settings, as
well as Internet Explorer settings against unwanted changes.
If an application tries to perform a potentially dangerous action, it will be
checked for trust. Safe applications are allowed to operate, while actions
by unsafe applications are blocked.
When System Control is enabled, you can configure Application Control
in such a way that it asks users what to do only in those cases when
System Control does not trust an application.
5.4.1 System Control Configuration Settings
To enable System Control, select the Enable System Control check box.
You can select what to do when a system modification attempt is
detected. The following actions are available:
Action Definition
Always ask
permission System Control asks the users whether they
want to allow or block all monitored actions,
even when System Control identifies the
application as safe.
Ask when case is
unclear System Control asks the users whether they
want to allow or block monitored actions only
when System Control cannot identify the
application as safe or unsafe (default option).
Automatic: Do not
ask System Control blocks unsafe applications and
allows safe applications automatically without
asking the user any questions.