What's new in this release of Application Control

A summary of new or changed features and enhancements included in BigFix Application Control v2.0.0

BigFix Application Control v2.0.0

New features that are introduced in Application Control v2.0.0

This release focuses on providing a robust, stable, and secure foundation for application control.

WDAC Base Policy Deployment
Deploy Microsoft-provided WDAC base policies to Windows endpoints.
Policies are deployed and activated using BigFix Fixlets.
Supplemental Policy Deployment
Deploy WDAC supplemental policies to endpoints with an active base policy.
Centralized Policy Management
Manage WDAC policies from the BigFix Console.
Support for publisher, file hash, file name, and file path rules.
Support for Audit and Enforcement modes.
Monitoring and Reporting and Audited Application Blocks
Collect and report applications that would be blocked in Audit mode.
Validate application impact before enforcement.
Blocked Application Reporting
Report blocked application execution events in Enforcement mode.
Includes application name, file path, hash, publisher, rule, and time stamp.
Events aggregated across endpoints to identify frequently blocked applications.
Identify impacted endpoints and analyze block patterns.
Active Policy Monitoring
View active WDAC policies on endpoints.
Includes base and supplemental policies and enforcement mode.
Verify policy enforcement and ensure compliance across endpoints.
Deployment Status Monitoring
Track policy deployment status across endpoints.
Identify failed or incomplete deployments.
Policy Management and Policy Removal
Remove WDAC base or supplemental policies from endpoints for rollback or recovery.
Security
Policies are securely signed to ensure integrity.
Role-based access control for policy operations.
Performance and Scalability
Support for large-scale deployments.
Minimal impact on endpoint performance during enforcement.
All policies (Base & Supplemental) are applied without reboot.
Additional information about this release
Published Site and Component Versions:
  • Application Control site version: 2
Application Control Documentation links: