McAfee Application Control 5.0
McAfee Application Control 5.0 is the result of McAfee's acquisition of Solidcore
- No significant cons
- Minimal client interface
Just as whitelisting may be finding a receptive audience, a number of whitelisting solutions are proving to be mature, capable, and manageable enough to provide significant protection while still giving trustworthy users room to breathe. McAfee's whitelisting protection for Windows, Linux, and Solaris is a good example of this: short on nothing but shortcomings.
Note: Pricing for this product is subject to resellers' discretion, so prices will vary within Australia
McAfee's whitelisting protection for Windows, Linux, and Solaris is a software tool that allows network admins to restrict users' ability to mess up their own PCs - McAfee Application Control 5.0.
Last year, the number of unique malicious programs and variants that were created outstripped all the legitimate software published in the world, straining the accuracy of antivirus solutions like never before. It's a disturbing fact that suggests whitelisting is now more suitable as a primary security defence than traditional antivirus scanners, which are really nothing more than blacklisting programs. Enter, products such as McAfee Application Control.
McAfee Application Control 5.0 (due out December 15) is the result of McAfee's acquisition of Solidcore and the integration of Solidcore S3 Control with McAfee ePolicy Orchestrator (ePO). McAfee Application Control enjoys broad client support. It also boasts write protection and ownership protection of whitelisted files, good reporting and alerting, and no significant cons.
McAfee Application Control 5.0 can enforce whitelisting policies on Windows NT 4 through Windows Server 2008 (Windows 7 support is forthcoming), Suse Linux 9 and 10, Oracle Enterprise Linux, Red Hat Linux 3 through 5 (and CentOS), and Solaris 8 through 10. Its precursor, Solidcore S3 Control, is in use on thousands of client nodes and is deployed on more than 250,000 ATMs.
McAfee Application Control 5.0's management console is a dashboard component of McAfee ePO 4.5. Administrators connect via a secure browser session, where they can manage Application Control and any other McAfee security solutions they have deployed.
Protected PCs are considered "Solidified", a term that harkens back to the product's Solidcore days. The client interface is minimal, consisting of command-line instructions and parameters. Clicking an icon on the client desktop, called the McAfee Solidifier Command Line, gives access to all the Solidifier console commands, which allows a user to control everything an administrator could from within the ePO management console. Of course, ePO configurations can prevent local commands from working.
What McAfee Application Control 5.0 may lack in client interface it makes up for in overall functionality. It can allow or deny program executions by file name, SHA-1 hash, path rules, and digital certificates. McAfee's solution allows or denies individual scripts or files of any type, although configuring these policies takes extra steps.
An administrator must first create a rule about the script interpreter or originating process, but then can allow or prevent individual scripts and files. For example, to prevent individual Perl scripts, the administrator would have to create a rule regarding Perl.exe, but then can allow or deny individual Perl scripts.
Similarly, 16-bit applications can be controlled by first creating a rule about Ntdvm.exe, and then marking the individual 16-bit applications.
Join the PC World newsletter!
Most Popular Reviews
- 1 Google Pixel XL full, in-depth smartphone review: Phones just got smarter
- 2 Sony Xperia XZ review: turbo-charged last-gen phone
- 3 Hisense Series 7 ULED 4K UHD TV review
- 4 Sony X9300D and X8500D UHD 4K TV review
- 5 Moto X Force review: Leading features from a mid-range phone
Latest News Articles
- Netgear tweaks its home security camera line by introducing the Arlo Pro
- PSA: Windows 10's Anniversary Update reactivates ads you've already disabled
- Largest DDoS attack ever delivered by botnet of hijacked IoT devices
- Hackers have a treasure trove of data with the Yahoo breach
- Judge paves the way for British hacker's extradition to US
GGG Evaluation Team
First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.
For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.
The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.
The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.
My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.
- Google Pixel XL full, in-depth smartphone review: The new best Android phone
- Japan Robot, gadget and car expo slideshow
- Panasonic DX900U UHD 4K smart TV review: Best all-round TV ever?
- What's the difference between an Intel Core i3, i5 and i7?
- Laser vs. inkjet printers: which is better?
- CCeCommerce Project ManagerNSW
- CCAcquisition Marketing Executive - B2BNSW
- CCSolution DesignerVIC
- CCJunior Programmer (Application Dev. & Mgt.) 161017/JP/221Asia
- CCAccounts Payable/Contract Officer- NSW Government backgroundNSW
- CCAnalyst Programmer (12-Month Renewable Contract)Asia
- CCProject SchedulerVIC
- CCIteration ManagerVIC
- FTOperational Integrity ManagerNSW
- CCDigital Producer - 3 Month Contract Immediate Start!NSW
- CCSenior Project Specialist - SchedulingVIC
- CCSitecore DeveloperNSW
- CCPerformance AnalystNSW
- CCContract IT Assistant (PC LAN Support) 161114/ITA/411Asia
- CCContract Programmer (Internet/Intranet) 161019/P/615Asia
- CCContract Analyst Programmer (JAVA/J2EE) 161101/AP/162Asia
- CCJava DeveloperNSW
- FTSenior .Net Software EngineerVIC
- FTEmbedded Software EngineerSA
- CCInfrastructure Project Manager - Site MoveNSW
- FTDevOps EngineerVIC
- CCApplications Support Technical OfficerACT
- CCDevOps/Automation EngineerNSW
- CCIT Senior Systems Administrator- Server Patching RemediationNSW