Raise a Blocked Application Exception Request in BigFix Application Control

End users on BigFix Application Control-managed endpoints can raise a temporary exception request for a blocklisted application directly from the blocked application notification using the Request Access button. The request requires a business justification and a valid start-to-end date window; it is routed to the organization's exception manager for approval via a ServiceNow ticket, and the application is automatically re-blocked after the end date. A maximum of 60 exception requests can be raised per endpoint.

About this task

Learn how desktop users or end users can raise an application exception request of blocklisted applications.
As a user, you can raise requests for blocklisted applications which need to be approved by your organization’s exception manager. While raising the exception request, you also need to define the start and end dates for the time the request will be valid. After the end date, the application will automatically be blocklisted again.
Note:
An end-user can raise a maximum of 60 exception access requests for an endpoint.

After you raise the request, it goes to your organization’s exception manager for approval.

To raise an application exception request, follow the below steps:

Procedure

  1. Run the blocklisted application on your endpoint.
  2. A BigFix® Application Control notification message is displayed stating that the application is blocked as per your organization’s security policy.
    Figure 1. BigFix Application Control — Application Blocked Notification Dialog

    BigFix Application Control notification dialog on a managed Windows endpoint stating the application is blocked as per the organization's security policy, with a Request Access button to initiate an exception request and an option to close the notification.
  3. From the notification message box, click the Request Access button.
  4. A Reason for Access Request dialog box appears. In this dialog box, type-in the business justification for requesting temporary access to the application in the available text field.
    Figure 2. BigFix Application Control — Reason for Access Request Dialog Box

    BigFix Application Control Reason for Access Request dialog box with a text field for the end user to enter a business justification explaining why temporary access to the blocked application is required.
  5. A date picker dialog box named Select Expiration Date is displayed. Select the start and end date and click OK.
    Figure 3. BigFix Application Control — Select Expiration Date Date Picker Dialog

    BigFix Application Control Select Expiration Date date picker dialog showing a calendar control for the end user to select the start date and end date that defines the validity window for the exception request, with an OK button to confirm the selection.
    Note:
    A Pending Request Exists message is displayed, if previously you have raised a request for the application. You cannot raise another request if a previous request is raised and in a pending approval state.
    Figure 4. BigFix Application Control — Pending Request Exists Message

    BigFix Application Control Pending Request Exists message dialog indicating that a previous exception request for this application is already in a pending approval state with the exception manager, and a new request cannot be submitted until the prior request is resolved.
  6. A ServiceNow™ ticket is raised and the request is visible to the exception manager.
    Figure 5. BigFix Application Control — Exception Request Created — ServiceNow Ticket Reference Number

    BigFix Application Control confirmation screen showing that the exception request has been successfully created and a ServiceNow ticket reference number has been generated. The reference number confirms the request has been routed to the organization's exception manager for review and approval.

Results

An exception request ticket for a blocklisted application is successfully raised and routed to the exception manager for approval via ServiceNow. The application remains blocked until the exception manager approves the request. Once approved, temporary access is granted for the selected date window; after the end date, the application is automatically re-blocked.

This task ensures that users can request temporary access to required applications while adhering to organizational security protocols.