McAfee Application Control 5.0
McAfee Application Control 5.0 is the result of McAfee's acquisition of Solidcore
- No significant cons
- Minimal client interface
Just as whitelisting may be finding a receptive audience, a number of whitelisting solutions are proving to be mature, capable, and manageable enough to provide significant protection while still giving trustworthy users room to breathe. McAfee's whitelisting protection for Windows, Linux, and Solaris is a good example of this: short on nothing but shortcomings.
Note: Pricing for this product is subject to resellers' discretion, so prices will vary within Australia
McAfee's whitelisting protection for Windows, Linux, and Solaris is a software tool that allows network admins to restrict users' ability to mess up their own PCs - McAfee Application Control 5.0.
Last year, the number of unique malicious programs and variants that were created outstripped all the legitimate software published in the world, straining the accuracy of antivirus solutions like never before. It's a disturbing fact that suggests whitelisting is now more suitable as a primary security defence than traditional antivirus scanners, which are really nothing more than blacklisting programs. Enter, products such as McAfee Application Control.
McAfee Application Control 5.0 (due out December 15) is the result of McAfee's acquisition of Solidcore and the integration of Solidcore S3 Control with McAfee ePolicy Orchestrator (ePO). McAfee Application Control enjoys broad client support. It also boasts write protection and ownership protection of whitelisted files, good reporting and alerting, and no significant cons.
McAfee Application Control 5.0 can enforce whitelisting policies on Windows NT 4 through Windows Server 2008 (Windows 7 support is forthcoming), Suse Linux 9 and 10, Oracle Enterprise Linux, Red Hat Linux 3 through 5 (and CentOS), and Solaris 8 through 10. Its precursor, Solidcore S3 Control, is in use on thousands of client nodes and is deployed on more than 250,000 ATMs.
McAfee Application Control 5.0's management console is a dashboard component of McAfee ePO 4.5. Administrators connect via a secure browser session, where they can manage Application Control and any other McAfee security solutions they have deployed.
Protected PCs are considered "Solidified", a term that harkens back to the product's Solidcore days. The client interface is minimal, consisting of command-line instructions and parameters. Clicking an icon on the client desktop, called the McAfee Solidifier Command Line, gives access to all the Solidifier console commands, which allows a user to control everything an administrator could from within the ePO management console. Of course, ePO configurations can prevent local commands from working.
What McAfee Application Control 5.0 may lack in client interface it makes up for in overall functionality. It can allow or deny program executions by file name, SHA-1 hash, path rules, and digital certificates. McAfee's solution allows or denies individual scripts or files of any type, although configuring these policies takes extra steps.
An administrator must first create a rule about the script interpreter or originating process, but then can allow or prevent individual scripts and files. For example, to prevent individual Perl scripts, the administrator would have to create a rule regarding Perl.exe, but then can allow or deny individual Perl scripts.
Similarly, 16-bit applications can be controlled by first creating a rule about Ntdvm.exe, and then marking the individual 16-bit applications.
Join the PC World newsletter!
Most Popular Reviews
- 1 Samsung Galaxy S8 phone: full, in-depth review
- 2 Ryzen 5 vs Intel Core i5 CPU Australian review
- 3 Mass Effect Andromeda review: One for the fans
- 4 LG G6 phone: full, in-depth review
- 5 Samsung Galaxy A5 2017 phone: Full, in-depth review
Latest News Articles
- Hackers use old Stuxnet-related bug to carry out attacks
- A vigilante hacker may have built a computer worm to protect the IoT
- Suspected CIA spying tools linked to hacks in 16 countries
- The iCloud hackers' bitcoin ransom looks like a fake
- WikiLeaks: CIA used bits of Carberp Trojan code for malware deployment
PCW Evaluation Team
A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.
I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.
As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.
I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.
Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!
For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.
- Samsung Galaxy S8 phone: full, in-depth review
- Ryzen 5 vs Intel Core i5 CPU Australian review
- Mass Effect Andromeda review: One for the fans
- What's the difference between an Intel Core i3, i5 and i7?
- Laser vs. inkjet printers: which is better?
- TPBusiness AnalystNSW
- FTDeveloper - Python, Ruby, or PerlQLD
- FTUser Support AnalystNSW
- FTLevel 2 HelpdeskVIC
- FTBusiness Development ManagerACT
- CCSenior Network Architect l CCNP/CCIE R&S l Cisco ACINSW
- CCBusiness Analyst (Mid-level)VIC
- FTDevOps EngineerNSW
- FTPERMANENT Business AnalystsVIC
- CCIT Information Architect..VIC
- FTCRM Technical Specialist (Oracle Eloqua)WA
- FT.NET DeveloperWA
- CCCRM DeveloperACT
- CCSenior Full-Stack Developer (Digital Transformation Project)QLD
- FTTechnical WriterACT
- FTUX DesignerNSW
- FTSAP Fiori Technical SpecialistsACT
- CCSystems Specialist - Network Systems l Port MacquarieNSW
- FTDesktop Support/ Field Services EngineerQLD
- FTSenior Project AnalystVIC
- CCTraining Lead - TelcoVIC
- FTLevel 3 Application Support AnalystVIC
- FTSecurity EngineerACT
- TPProject/Deployment ManagerQLD
- CCSAP ISU Functional ConsultantVIC