Enabling Endpoint Control
Endpoint Network Access Control
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
36
04-40001-99556-20090626
http://docs.fortinet.com/
•
Feedback
Applying an Endpoint Control profile to a firewall policy
Once you have created an Endpoint profile, you can apply it to the firewall policy.
If FortiClient has a valid license, it periodically sends the list of application IDs to the
FortiGate unit. When the FortiGate unit receives an updated list, it compares the list of
applications against the Endpoint Profile that is assigned for that user and take the
following actions for each application:
Gambling
Software that enables online wagering or pay-for-play activity.
Games
Software that enables the playing of games, whether solo or jointly with
other players.
Screen Savers
Software that creates a display on the desktop screen when no
keystrokes or mouse movements have occurred for some specified
time.
Miscellaneous
Java Files
Binary files containing code to be executed by a Java interpreter (i.e.
files with .class or .jar extensions).
Other
Executables not otherwise categorized.
Scripts
Files containing non-malicious code to be executed by a scripting host
(i.e. as with .bat, .pl, .vbs extensions).
Temporary
Internet Files
JavaScript files, which load onto the desktop chiefly in association with
HTML files.
Productivity
Management
Software
Including CRM, ERP, SCM, etc.
Database
Software that enables the creation and utilization of structured sets of
information, the structure being provided by the definition of fields or
data objects, and the utilization consisting of analysis, synthesis, and
comparison across large quantities of such data.
Document
Viewers
Software other than that incorporated into document creation tools (e.g.
word processors) or other than web browsers that enable the creation
and viewing of documents and diagrams.
Graphics
Software packages that enable sophisticated graphics creation and
manipulation to engineering or studio standards. Includes CAD,
cartographic, rendering, and animation tools.
Generic
Productivity
Software
Software that provides a body of reference information and means for
accessing and displaying it. This also includes general desktop tools
such as calendars, clocks, and calculators.
Microsoft Office Word processor, Spreadsheet, presentation, contacts, etc.
Proprietary
Software developed within the firm for its own use and not as a product
or component of a product.
Software
Development
Tools used to create, debug, test, compile, and prepare for installation
and use new software programs.
Web and
Desktop
Publishing
Software that enables format conversion, manipulation, and integration
of text and image files for the purpose of publication on paper or on the
Web.
System
Installers
Executables that install applications.
System Utilities
Other enabling tools not otherwise classified.
Operating
Systems
The fundamental programs that enable the computer to recognize and
accept input, to enable and organize the operation of devices and
application programs, to manage stored information, and to direct
output in designated modes.
Table 2: Application groups and category definitions.
