Overview

Set a secure environment by using Application Control.

BigFix® Application Control is a security solution designed to manage which software can run on Windows devices within BigFix environments in an organization. It utilizes Windows Defender Application Control (WDAC) as the chosen enforcement engine to apply policies at the kernel level, preventing unauthorized software execution through kernel-level enforcement. It is a lightweight, native enforcement system designed for comprehensive management of application execution across enterprise endpoints. Following is a more detailed breakdown of its core components and how they function:
  1. Core Security Mechanism: WDAC Integration

    The solution's strength lies in its use of Windows Defender Application Control (WDAC).

    • Kernel-level Enforcement: Unlike standard software that runs in "user mode," WDAC operates within the Windows kernel. This means the security checks happen at the deepest layer of the operating system.
    • Allowlisting vs. Blocklisting:
      • Allowlisting: A "Zero Trust" approach where only approved applications can run; everything else is blocked by default.
      • Blocklisting: Specific known-malicious or unwanted programs are banned, while others are permitted.
  2. Centralized Management & Deployment

    BigFix acts as the "brain" for these Windows security features, allowing IT teams to manage everything from one place.

    • The BigFix Console: Instead of manually configuring every computer, administrators use the central BigFix console to create rules (policies) and push them out to thousands of endpoints simultaneously.
    • Policy Management: This includes defining which softwares are safe and which are restricted based on the inputs (like file hash, file name, file path, or publisher) provided.
Table 1. BigFix Application Control v2.0.0 Summary Table
Feature Benefit
WDAC Engine Provides high-level security that is difficult for malware to disable.
Kernel Enforcement Stops unauthorized code before it can even start.
BigFix Console Enables massive scalability for enterprise environments.
Note:
  • BigFix Application Control currently supports application enforcement for both physical and virtual Windows™ (environment) devices only.
  • Non-windows environment (macOS™ & UNIX™/Linux™) support is planned for the future.