Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1049202" data-attributes="member: 99014">[USER=67091]@Decopi[/USER] in my opinion Application Control is just where it belongs, part of firewall. It is the firewall job&nbsp; to manage connections. The firewall already applies a series of rules. It has few allow rules and the last one is called “Cleanup Rule” where all traffic not allowed goes and is blocked. The application control takes care of limiting the apps. Together, they ensure connection not desired by the user and not needed are not initiated.What must be done from here:-I believe firewall should automatically apply blocks to apps not classified as safe (the Check Point&nbsp; ThreatCloud network knows what’s safe and what’s not).-Perhaps user prompt so user can decide-Option to terminate apps, not just to block their connection (that’s in Harmony Endpoint).Option to add apps in advance (as mentioned by Decopi).Nevertheless, app control indeed is a positive improvement. Also, I hope before final release, engines will be updated to 86.80 as well and not 86.72.</blockquote>

[QUOTE="Trident, post: 1049202, member: 99014"] [USER=67091]@Decopi[/USER] in my opinion Application Control is just where it belongs, part of firewall. It is the firewall job to manage connections. The firewall already applies a series of rules. It has few allow rules and the last one is called “Cleanup Rule” where all traffic not allowed goes and is blocked. The application control takes care of limiting the apps. Together, they ensure connection not desired by the user and not needed are not initiated. What must be done from here: -I believe firewall should automatically apply blocks to apps not classified as safe (the Check Point ThreatCloud network knows what’s safe and what’s not). -Perhaps user prompt so user can decide -Option to terminate apps, not just to block their connection (that’s in Harmony Endpoint). Option to add apps in advance (as mentioned by Decopi). Nevertheless, app control indeed is a positive improvement. Also, I hope before final release, engines will be updated to 86.80 as well and not 86.72. [/QUOTE]

Verification