Home

Anti-Executable Enterprise User Guide

1. Faronics Anti Executable Le O x N Status Execution Control Li Temporary Execution Mode Setup User Groups AE Trusted AE Admin Role Addis Remove Passwords AE Trusted Users AE Administrators Enable Enable New Password New Password Confirm Password Confirm Password Status Retrieve OK Cancel Help 2 Click Add to add a new user Select the User icon from the list provided Users Tab 53 Select Use Select this object type Users Object Types From this location WINDOWS Locations Enter the object names to select examples Check Names a DK Cancel 3 Click Advanced gt Find Now to display a list of available users Anti Executable administrators can add domain users or groups and local users or groups Click on a user or group to add it to Anti Executable s list and click OK Select Users es Select this object type Users Object Types From this location wows Common Queries Name Starts with Columns Starts with Find Now Now Disabled accounts top Non expiring password a gt OK Cancel Search results Name RDN In Folder WINDOWS WINDOWS WINDOWS Administrator 3 core Y Guest 4 By default each added user is an Anti Executable Trusted User Ifthe new user is to be given administrative rights specify them as an Anti Executable Administrator by ch
2. Your Central Control List is empty The Central Control List consists of Files and Publishers that are used to create policies that govern the behavior of Anti Executable Let s populate your Central List so you can create new policies Manage Central List Don t remind me about empty Central Control List 2 The Anti Executable Central Control list screen is displayed Publishers Files O entries 0 selected Search File Name gt File Version E Date Publishers Product Name y Hash 3 In the File node click Add The Add files to Central Control List dialog is displayed Anti Executable Enterprise User Guide 36 Using Anti Executable Anti Executable Enterprise User Guide 3 Add Files to Central List Select where you want to add From 55 JDesktop ih My Documents li My Computer E My Network Places Alternatively enter a UNC path Include Sub Folders when scanning Include DLL files when scanning O E Populate the comments field with a custom comment added by core PCicore on 23 2 2012 Browse to select the folder drive on the console computer Select the following options and click Add Include sub folders when scanning select this option to include all the sub folders when scanning the selected drive folder Include DLL files when scanning to include DLL Dynamic Link Library files whi
3. E Remind me after every 1 Minutes Faronics ANTI Status DK Cancel p Anti Executable Enterprise User Guide 50 Using Anti Executable i The status can only be retrieved when a single workstation is selected Anti Executable Enterprise User Guide Execution Control List Tab 51 Execution Control List Tab The Execution Control List tab allows you to specify whether the items in the Local Control List or Central Control List must be Allowed or Blocked Faronics Anti Executable Es m s t Users Temporary Execution Mode Setup Show Files amp Folders Show Publishers Search p Name AE Source Trusted Type Path Added Comment x Action Ta z z x Date z x Add Remove Allow Block Identifile Details Status N Complete the following steps to specify the Anti Executable behavior 1 Select Show Files amp Folders or Show Publishers 2 If Show Files amp Folders is selected the following columns are displayed Name e AE Action e Source Trusted Type e Path Added Date Comment 3 Click Add to add Files or Folders to the Central Control List and Execution Control List Select an item and click Remove to remove from the Execution Control List Select an item and click Allow or Block Click Identifile Details to view the Identifile deta
4. added by core PC core on 23 2 2012 8 The folder drive is added to the policy Anti Executable Enterprise User Guide 42 Using Anti Executable y Files gt Folders Publishers Alerts pe General Settings Temporary Execution Mode Folders 1 entries 1 selected 9 Click the Publishers node Click Add y Files Publishers i Folders i Publishers Select a specific publisher detail to allow its execution within a policy f Unchecked items will be ignored General Settings Temporary Execution Mode 10 Select the Publishers that were added to the Central Control List and click Add Anti Executable Enterprise User Guide Anti Executable Policy 43 Publishers Select Publishers to allow execution of particular File Versions Files or Programs signed by a Publisher Any checked items will be allowed to run If your list is empty or if you want to add or remove Publishe manage Central List i Cdl E Faronics Corporation 11 The Publishers are added Select the top node of the Publisher to add all sub nodes or just select the sub node p Files Publishers Folders Publishers Select a specific publisher detail to allow its execution within a policy ab Unchecked items will be ignored General Settings Y Faronics Corporation Temporary Execution Mode a Faronics Anti Executable Loadin B
5. F anti executable console loadin installer exe E 4 20 2100 481 12 Click the Alerts node Click Change to change the image displayed to the users You can also edit the Execution Control List violation message and Blocked notification message Anti Executable Enterprise User Guide 44 Using Anti Executable Alerts Folders Publishers Image Execution Control List violation message General Settings gt This action violates the acceptable use policy Temporary Execution Mode 1 Blocked notification message This action violates the acceptable use policy 13 Click General Settings node Configure the following settings r amp Policy Details Default Files Folders Logging Publishers 7 Log to File Alerts gt 4 rolling log files up to 10 MB 40 MB total disk space Temporary Execution Mode Stealth Mode Hide Notification 7 Hide icon on system tray Advanced Control T Monitor DLL execution E Monitor JAR Execution g mpatibility Options E Enable Deep Freeze compatibility E Enable Faronics Anti Virus compatibility Cancel Logging Select Log to File to log events to the log file In Windows XP the log file is located at C Documents and Setings All Users Applications Data Faronics Storage Space AEE In Windows Vista and Windows 7 the log file is located at C Progr
6. configuration is retrieved automatically CA Faronics Anti Executable Execution Control List I Users I Temporary Execution Mode Setup About Faronics ANTI Product Version License Key Protection Enable 6 Disable Maintenance Mode Remind me after every 1 Minutes Status Cancel Verifying Product Information The About pane displays the version of Anti Executable installed If newer versions are available New version is available is displayed Click Update for more information If an Evaluation version of Anti Executable has been installed the Valid until field displays the date when Anti Executable expires Anti Executable displays a notification about the current status of the License in the windows system tray Once the evaluation period expires Anti Executable will no longer protect a machine The following expired icon is displayed in the system tray when Anti Executable expires E License Keys can be obtained by contacting Faronics or Faronics Partners Enabling Anti Executable Protection Anti Executable Enterprise User Guide Following installation Anti Executable is enabled by default Status Tab 49 Use the Remind Me after every check box to have Anti Executable provide reminders on a workstation to enable Protection if Protection is disabled Anti Executable Maintenance Mode Select Mainten
7. downloaded from the Internet double click the Anti Executable Console Loadin Installer exe file to begin the installation process Click Next to continue Welcome to the Setup Wizard for Faronics Anti Executable Loadin The Setup Wizard will install Faronics Anti Executable Loadin on your computer To continue click Next WARNING This program is protected by Copyright law and international treaties www faronics com Version 5 00 2100 504 2 Read and accept the License Agreement Click Next to continue 15 Faronics Anti Executable Loadin Setup Wizard License Agreement Please read the following license agreement carefully Anti Executable Loadin License Faronics Corporation Copyright 1999 2011 All Rights Reserved Master Software License Agreement LICENSE GRANT Faronics hereby grants the Licensee a limited non exclusive license to install use access display run or otherwise interact with Use the Product on a computer In no circumstances shall the Licensee be permitted to Use the Product on a number af namni tarse eveaadina the mimar af I iransad Camnitars cat ont shove 9 I accept the terms in the license Agreement 5 I do not accept the terms in the license Agreement Version 5 00 2100 504 Anti Executable Enterprise User Guide 18 Installing Anti Executable 3 Enter the User Name and Organization Specify the license key for Anti Executable Enterprise or Anti Executable Serv
8. or Anti Executable Administrators only e Temporary Execution Mode log select the check box to create log files during Temporary Execution Mode Number of log files specify the number of log files up to a maximum of 10 The logging information is stored in the files serially For example if there are 3 files A B and C Faronics Anti Executable first writes the error logs to file A Once file A is full it starts writing to file B and finally file C Once file C is full the data in file A is erased and new logging data is written to it File size Select the size of each file in MB There can be a maximum of 10 log files of up to 10 MB each i e total 100 MB 15 Click OK The policy is saved Anti Executable Enterprise User Guide Configuring Anti Executable 47 Configuring Anti Executable Right click on a single workstation and select Configure Anti Executable Client Anti Executable settings are retrieved from the workstation and the following tabs are available e Status e Execution Control List e Users e Temporary Execution Mode e Setup Anti Executable Enterprise User Guide 48 Using Anti Executable Status Tab The Status tab allows Anti Executable Administrators and Trusted Users to configure various settings set protection to Enable Disable or Maintenance Mode When a single workstation is selected in Faronics Core Console and Configure Anti Executable is selected the workstation
9. r 1 Faronics Anti Executable Enterprise lali 14 Status Execution Control List Users Temporary Execution Mode Setup Logto File Monitor DLL execution Monitor JAR Execution Hide Notification Enable Deep Freeze compatibility Hide icon on system tray Enable Faronics Anti Virus compatibility This action violates the acceptable use policy Status Successfully retrieved settings for WIN O6A1942RTQJ Retrieve l OK l Cancel Setting Event Logging in Anti Executable Select Log to File to log events to the log file In Windows XP the log file is located at C Documents and Setings All Users Applications Data Faronics Storage Space AEE In Windows Vista and Windows 7 the log file is located at C ProgramData Faronics Storage Space AEE Monitor DLL Execution Select the Monitor DLL Execution check box to monitor DLLs If this check box is not selected the DLLs will not be monitored even if they have been added to the Execution Control List Monitor JAR Execution Select the Monitor JAR Execution check box to monitor JAR files If this check box is not selected the JAR files will not be monitored even if they have been added to the Execution Control List Anti Executable Stealth Functionality Stealth Mode is a group of options that control visual indication of Anti Executable s presence on a Anti Executable Enterprise User Guide 58 Using Anti Executable system Stealt
10. 49 Retrieving settings from Faronics Core Console as 49 Execution Control List Tab is 51 Users Tab i cuarta e bees iii oia apa Ree eee S a cata de ata de ni 52 Anti Executable Enterprise User Guide 4 Anti Executable Adding an Anti Executable Administrator or Trusted User saasaa aaa 52 Removing an Anti Executable Administrator or Trusted User ees 53 Enabling Anti Executable Passwords 2 0 00 a ee 54 Temporary Execution Mode Tab ce es 55 Activating or Deactivating Temporary Execution Mode 0000 eee ees 55 Setup Tabo sci cacao eee ads Sb hae ae eee A CE eee A oe Rea bea Pan Shee 57 Setting Event Logging in Anti Executable 0 aaa ee 57 Monitor DLL Execution 2 iaeia kk a iia i A a aian ai aa a a io ai an a aaa a aana 57 Monitor JAR EXCCUtION 5 us bia es k a a k a a chet aes 57 Anti Executable Stealth Functionality a saa aaa eee 57 Compatibility Options s s raan eas 044 mara dee ei ae Gee eee eee Re RG Re RE a 58 Customizing AleFES 44 Aaaa aa k S a eA DE AA 59 Creating an Anti Executable Report through Faronics Core Console o o o oooooo 60 Command Line Control 2 oo uu ma 61 Command Lin CONtrOl K sk k ska ks a a a Aa as eas 62 Uninstalling Anti Executable 000 cee ee 65 Uninstalling Anti Executable on the Workstation via Faronics Core Console 66 Uninstalling Anti Executable Loadin using Installer 0 0000 eee es 67 Uni
11. Anti Executable Anti Executable A software library that extends the functionality of Faronics Core Console Loadin allowing full control over the configuration and operation of Anti Executable installed on remote workstations Anti Executable They can set Anti Executable protection to Enable or Disable Trusted Trusted User Users cannot uninstall upgrade Anti Executable Central Control When Faronics Core is launched for the first time after installing List Anti Executable you are prompted with a message to populate it You can populate the Central Control List by adding the files and Publishers on the console computer This Central Control List can then be applied to the workstations via a Policy The Central Control List needs to be created only once but can be applied multiple times to more than one workstation via a Policy Executable Any file that can be launched by the operating system The executable files managed by Anti Executable have the extension scr jar bat com or exe Dynamic Link Library files with the extension dll can be managed if configured in the Setup tab Execution An Execution Control list defines how Anti Executable must manage a file Control List or Publisher The Execution Control List defines whether the file must be Allowed or Blocked External User Any user that is neither an Anti Executable Administrator nor an Anti Executable Trusted user An external user can run only authorize
12. Anti Executable Enterprise User Guide Technical Support 7 Technical Support Every effort has been made to design this software for ease of use and to be problem free If problems are encountered contact Technical Support Web support faronics com Email supported faronics com Call Toll Free North America 1 800 943 6422 Call Local 1 604 637 3333 Hours Monday to Friday 7 00am to 5 00pm Pacific Time Contact Information Headguarters Faronics Corporation 609 Granville Street Suite 620 Vancouver BC V7Y 165 Canada Web www faronics com Email sales faronics com Phone 800 943 6422 or 604 637 3333 Fax 800 943 6488 or 604 637 8188 Hours Monday to Friday 7 00am to 5 00pm Pacific Time Faronics Technologies USA Inc 2411 Old Crow Canyon Road Suite 170 San Ramon CA 94583 USA Faronics Corporation Europe Siena Court The Broadway Maidenhead Berkshire SL6 1NJ UK Anti Executable Enterprise User Guide 8 Anti Executable Definition of Terms Term Definition Alert The notification dialog that appears when there is an attempt to launch an unauthorized executable Anti Executable Administrators can specify the message and image displayed in the alerts Anti Executable Anti Executable Administrators have access to all Anti Executable Administrator configuration options They can manage Anti Executable users set Anti Executable protection to Enabled or Disabled and uninstall upgrade
13. ForOonicS mio SETE ENTERPRISE ABSOLUTE Protection from Unauthorized Executables For onics Control www faronics com Last modified October 2012 1999 2012 Faronics Corporation All rights reserved Faronics Deep Freeze Faronics Core Console Faronics Anti Executable Faronics Device Filter Faronics Power Save Faronics Insight Faronics System Profiler and WINSelect are trademarks and or registered trademarks of Faronics Corporation All other company and product names are trademarks of their respective owners Anti Executable Enterprise User Guide Anti Executable Preface iaa a a a ee ae ew aaa kia eee See eee Se a ka we 5 Important Informations cc tae k Ra Ee aa a EE ee Ra a ek 6 About FarOMiCS 54 i ad esd ew ae ele i Snel oe ee Pe dee a a a N 6 Product DOCUMENTATION sio ee ak RAE i he ee ee o ee HE je Gk dea a ai 6 Technical SUPPOMts 05 k k ki we A A a a AA AA Ee A 7 Contact Information lt sies roedi eiom iae Ee ea e e ea 7 Definition Of T FMS 44 1 sha ak a a Aa ae A a a a a AA 8 Introduction 0 o oo oo 10 Anti Executable Overview ks 11 About Anti Executable lt ees 11 Anti Executable Editions x sa ser cu a i ee ee a ed as 11 About Faronics Core Console 1 2 ooo 11 System Requirements Suk aaa ad ae a A ate a a a ae 12 Console Requirements 4 4 4 a sarmatai ag dene PRE aa Pee a ee Rea eee we ale 12 Workstation Requirements 2 o 12 Anti Executable Licensing ssa
14. able Enterprise User Guide 40 Using Anti Executable Files and Folders 1 entries 1 selected Use the list below to add granular application control capabilities to a Policy If your list is empty or if you want to add or remove files manage Central List File Name File Version Publishers Product Name Unknown Version 02 22 201 Unknown Product ESF2DF754C493 antiexecutable_c 4 20 2100 481 02 22 2012 Faronics Corporat Faronics AntiExe 3D8C1A9C977F5 5 The files are added to the policy Files gt Folders Publishers Alerts General Settings Le Temporary Execution Mode Folders 1 entries 1 selected 6 Click the Folders node and click Add Anti Executable Enterprise User Guide ev Files o gt Folders Publishers pe Alerts General Settings Temporary Execution Mode Folders 0 entries 0 selected Anti Executable Policy 41 ada Remove Export 7 Browse to select the folder from the Add Folders to Policy List dialog Alternatively you can enter a UNC path Select the Populate the comments field with a custom comment and specify a comment optional Click Add Select where you want to add from W Desktop Lih My Documents 2 1 My Computer ony H Ds I En wboxsrv Shared Folder Ee My Network Places Alternatively enter a UNC path 4 Populate the comments field with a custom comment
15. amData Faronics Storage Space AEE Stealth Mode Stealth Mode is a group of options that control visual indication of Anti Executable s presence on a system Stealth Mode gives the option to the Administrator to hide the Anti Executable icon in the Windows system tray When Anti Executable is not visible in the system tray Administrators and Trusted users can launch Anti Executable through the Ctrl Alt Shift F10 hotkey Stealth functionality has the following options Hide Notification prevents the Alert from being displayed Hide icon on system tray hides the Anti Executable icon in the system tray Anti Executable Enterprise User Guide Anti Executable Policy 45 Monitor DLL Execution Select the Monitor DLL Execution check box to monitor DLLs If this check box is not selected the DLLs will not be monitored even if they have been added to the Control List Monitor JAR Execution Select the Monitor JAR Execution check box to monitor JAR files If this check box is not selected the JAR files will not be monitored even if they have been added to the Control List Compatibility Options Anti Executable is compatible with Deep Freeze and Faronics Anti Virus Deep Freeze Compatibility This feature is applicable only when Deep Freeze and Anti Executable are installed on the computer The Deep Freeze Compatibility feature allows the Administrator to synchronize the Maintenance Modes of Deep Freeze
16. an image that appears whenever a user attempts to run an unauthorized executable The following messages can be set e Execution Control List violation message Blocked notification message Enter a message or use the default message provided This text will be displayed in all alert dialogs whenever a user attempts to run an unauthorized executable Choose a bitmap image by clicking Change and browsing to a file The selected image will accompany the text in the alert dialog Alert messages display the following information Executable location Executable name Default or customized image Default or customized message Asample alert dialog is displayed below E Anti Executable Alert This action violates the acceptable use policy File Name setupscreenhunterfree exe Location C Users core Desktop setupscreenhunterfree exe Publisher Unknown Product Name Unknown Product File Version Unknown Version Type Application Size 11 52 MB 12085143 bytes Date modified 3 6 2012 4 50 44 PM Description Show Identifile information about this file 4 Hide details Anti Executable Enterprise User Guide 60 Using Anti Executable Creating an Anti Executable Report through Faronics Core Console Anti Executable Enterprise User Guide Anti Executable provides the following reports Activity Report detailed report for each workstation Temporary Execution Mode Report detailed re
17. ance Mode and click Apply to run Anti Executable in Maintenance Mode When in Maintenance Mode new executable files added or modified are automatically added to the Execution Control List To exit Maintenance Mode select Enable or Disable If Enable is selected the changes are recorded by Anti Executable If Disable is selected the changes are not recorded by Anti Executable A A AN The Disable Keyboard and Mouse check box is available only while accessing Anti Executable via Faronics Core Console This is to ensure that a computer that has its keyboard and mouse disabled can still be managed remotely via Faronics Core Console Adeguate time reguired for Windows Updates must be provided while running in Maintenance Mode If the computer is running in Maintenance Mode and the Protection is disabled the changes made to the workstation during Maintenance Mode are not added to the Execution Control List Retrieving settings from Faronics Core Console The Status pane retrieves and displays all the settings of a single workstation When a single workstation is selected and Anti Executable is launched via Faronics Core Console the workstation settings are retrieved automatically Faronics Anti Executable feo B mem Execution Control List Users Temporary Execution Mode Setup About A Product Version License Key Protection Enable 9 Disable O Maintenance Mode
18. and Anti Executable By enabling the Enable Deep Freeze Compatibility check box Anti Executable will automatically enter Maintenance Mode when Deep Freeze enters Maintenance Mode Deep Freeze reboots Thawed in Maintenance Mode By setting both Deep Freeze and Anti Executable to be in Maintenance Mode at the same time any executable that is added to the computer will not only be added to the Execution Control List but will be retained by Deep Freeze once it freezes back the computer after the Maintenance Mode ends Anti Executable will stay in Maintenance Mode until shortly before the Maintenance Mode of Deep Freeze ends Once Anti Executable exits Maintenance Mode it will add any new or updated executable files to the Execution Control List When Deep Freeze exits its Maintenance Mode it will reboot the computer Frozen with the updated Execution Control List Compatibility is enabled and Deep Freeze status is Frozen This is because i It is not possible to set Anti Executable to Maintenance Mode if Deep Freeze changes made to the computer will be lost on reboot If Anti Executable is disabled and Deep Freeze enters Maintenance Mode Anti Executable will continue to be disabled Maintenance periods triggered by Deep Freeze will take precedence over any other Maintenance periods scheduled on Anti Executable For more information on Deep Freeze visit http www faronics com deepfreeze Faronics Anti Virus Compatibility This feat
19. ault location is C Program Files Faronics AE Click Next to continue Destination Folder here the application will be installed Install Faronics Anti Executable Enterprise Edition to C Program Files Faronics AE Browse Version 5 00 2111 513 5 Specify the AE Administrator User Password and the AE Trusted User Password Click Next to continue Installation Configuration Enter the Following information to personalize your installation AE Administrator User Password Optional Enter Password Re Enter Password AE Trusted User Password Optional Enter Password Re Enter Password Version 5 00 2111 513 Anti Executable Enterprise User Guide 22 Installing Anti Executable Anti Executable Enterprise User Guide Select the following options and Click Install Include DLLs while creating the control list select this option if you want DLLs to be included Scan with Faronics Anti Virus before applying local control list select this option if you want Faronics Anti Virus to scan the computer before applying the local control list This option is enabled only if Faronics Anti Virus is installed 8 Faronics Anti Executable Enterprise Edition Setup Wizard Ready to install program The wizard is ready to begin installation Automatic Scanning Include DLL files when creating control list E Scan with Faronics A
20. ctivating or Deactivating Temporary Execution Mode Temporary Execution Mode can be activated in the following ways From Faronics Core Anti Executable Enterprise User Guide 56 Using Anti Executable Anti Executable Enterprise User Guide e Activating Temporary Execution Mode Select one or more workstations and select Anti Executable gt Temporary Execution Mode gt x minutes select up to 60 minutes 24 hours or 7 days e Deactivating Temporary Execution Mode Select one or more workstations and select Anti Executable gt Temporary Execution Mode gt Disable From the workstation Activating Temporary Execution Mode Right click on the Anti Executable icon in the System Tray and select Temporary Execution Mode gt x minutes select up to 60 minutes 24 hours or 7 days e Deactivating Temporary Execution Mode Right click on the Anti Executable icon in the System Tray and select Temporary Execution Mode gt Disable The following icon is displayed in the System Tray at the workstation when Temporary Execution Mode is activated Ga A message appears at the workstation 3 minutes before the Temporary Execution A Mode ends Automatic Windows Updates will be disabled during Temporary Execution Mode gt Setup Tab 57 Setup Tab The Anti Executable Administrator can setup Logging to log various user actions apply various settings for Stealth Mode set up Alerts and enable Compatibility Options
21. d executables and has no control over Anti Executable configuration This restriction applies regardless of any user rights assigned by the operating system Faronics Core The software installed on workstations to enable communication with Agent Faronics Core Console Anti Executable Enterprise User Guide Definition of Terms Term Definition Identifile The Identifile Database provides information about executable files The Identifile details include Manufacturer Name Application Type Product Name Product Version File Name and Special Code Special Code is a single character field that identifies special file signature entries such as malicious code signatures or other types of special entries Special Code can have values such as M malicious file S special file or it can be blank normal file JAR file A JAR Java ARchive is an archive file format contains many Java class files and associated metadata and resources text images and so on into one file to distribute application software or libraries on the Java platform Maintenance When in Maintenance Mode new executable files added or modified are Mode automatically added to the Local Control List Policy A policy is a group of Anti Executable settings Multiple policies can be created and applied to workstations via Faronics Core You can create a New Policy edit an existing Policy or delete a policy Protection When set to Enabled this setting i
22. dow The Actions pane lists these tasks once a workstation has been selected from the list Protection To quickly Enable or Disable Anti Executable protection select one or more workstations and click on Protection gt Enable or gt Disable in the Actions pane Maintenance Mode Set Anti Executable to run in Maintenance Mode Keyboard and Mouse Disable or enable keyboard and mouse devices on an individual workstation or multiple workstations by clicking on Keyboard Mouse and selecting Disable or Enable Manage AE Users Select this option to manage Anti Executable users Temporary Execution Mode Temporary Execution Mode allows users to run any executable without any action from Anti Executable for a specified period Select a workstation and select Temporary Execution Mode and select 5 15 30 45 60 or Custom Select a workstation and select Temporary Executing Mode gt Disable to disable Temporary Execution Mode Initiate a Local Control List Scan Initiate a Control List scan by scanning for files on the workstation You can also add the files or Publishers to a policy Reassign Policy Reassign the policy currently applied on the workstation Configure Anti Executable Client Select this option to configure Anti Executable Client on the workstation Install Upgrade Anti Executable Client Select this option to install or upgrade the Anti Executable Client Uninstall Anti Executable Client Select this option t
23. e machine and must be uninstalled or upgraded to a Full Version A Full version requires a valid License Key in order to protect the machine Anti Executable Licensing works as follows The Core Server a component of Faronics Core automatically pushes the License Key to the workstations where Anti Executable Client is installed if the computers are offline the License Key is applied once the computers are back online If the Faronics Anti Executable License Key was entered while installing the A Loadin it is not necessary to enter it again in the Properties tab System License Keys for Server editions of Anti Executable cannot be used on i Server editions of Anti Executable cannot be installed on a non Server Operating non Server editions Non Server editions of Anti Executable cannot be installed on a Server Operating System License Keys for Non Server editions of Anti Executable cannot be used on Server editions Anti Executable Enterprise User Guide 14 Introduction Anti Executable Enterprise User Guide Topics Installing Anti Executable This chapter describes the installation process of Anti Executable Installation Overview Installing Anti Executable Loadin Anti Executable Enterprise User Guide 15 16 Installing Anti Executable Installation Overview Anti Executable Enterprise User Guide The Anti Executable Loadin must be installed to facilitate the execution of Anti Executable specif
24. ecking the Anti Executable Admin Role check box Removing an Anti Executable Administrator or Trusted User Click on the Users tab and select the user to be removed Click Remove This does not remove the user s Windows user account The user has now become an external user Anti Executable Enterprise User Guide 54 Using Anti Executable Enabling Anti Executable Passwords As an added layer of protection Anti Executable can attach a password to each user group Passwords only apply to the members of the associated groups To specify a password ensure the Enable check box is selected and enter the password in the New Password and Confirm Password fields Click Apply to save any changes Status Execution Control List Temporary Execution Mode Setup User Groups AE Trusted AE Admin Role Add Remove Passwords AE Trusted Users AE Administrators E Enable E Enable New Password New Password Confirm Password Confirm Password Status a eaten _ ns Anti Executable Enterprise User Guide Temporary Execution Mode Tab 55 Temporary Execution Mode Tab Temporary Execution Mode allows users to run any executable without any action from Anti Executable for a specified period During this period the user is allowed to run any executable without any restrictions Once the Temporary Execution Mode period ends Anti Executable is Enabled The Temporary Execution Mode
25. er Anti Executable has been uninstalled from the selected workstations A Faronics Core Console will reboot them to complete the uninstall process Anti Executable Enterprise User Guide Uninstalling Anti Executable Loadin using Installer Uninstalling Anti Executable Loadin using Installer Anti Executable can be removed by double clicking on Anti Executable_Console_Loadin_Installer exe The Setup Wizard is displayed 1 Click Next to begin the uninstall Welcome to the Faronics Anti Executable Loadin Setup Wizard The Setup Wizard allows you to change the way Faronics Anti Executable Loadin features are installed on your computer or to remove it from your computer Click Next to continue or Cancel to exit the Setup Wizard www faronics com Version 5 00 2100 504 2 Click Remove followed by Next Change repair or remove installation Select the operation you wish to perform Change Faronics Anti Executable Loadin has no independently selectable features Repairs errors in the most recent installation by fixing missing and corrupt files shortcuts and registry entries Remove Removes Faronics Anti Executable Loadin from your computer Version 5 00 2100 504 3 Click Remove Anti Executable Enterprise User Guide 67 68 Uninstalling Anti Executable Ready to remove program Click Remove to remove Faronics Anti Executable Loadin from your computer Click Back t
26. er Enterprise Select Use Evaluation to install an evaluation version Customer Information Please enter your information User Name core Organization Anti Executable Enterprise License Key o o Use Evaluation 30 days Anti Executable Server Enterprise License Key q AAA Use Evaluation 30 days Version 5 00 2100 504 4 The default is C Program Files Faronics Faronics Core 3 Loadins Anti Executable Click Install to continue Ready to install the program The wizard is ready to begin installation A Install Faronics Anti Executable Loadin to C Program Files Faronics Faronics Core 3 Loadins Anti Executable Click Install to begin the installation Tf you want to review or change any of your installation settings click Back Click Cancel to exit the wizard Version 5 00 2100 504 5 The Faronics Core Server Service must be restarted to complete the installation successfully Click Yes to restart the Faronics Core Server Service Click No to restart the service manually later Anti Executable Enterprise User Guide Installing Anti Executable Loadin 19 J Faronics Anti Executable Loadin Setup Wizard o B The Faronics Core Server Service must be restarted in order to complete the installation successfully Restarting the Faronics Core Server Service will disconnect all active sessions Would you like to do th
27. es Search P alohatest Blue Eye v Ronnie Balle Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Oracle Corporation Microsoft Windows 0 0 0 0 0 0 0 0 0 0 Add f Remove Import Export 8 Click OK The Central Control List is saved and can be applied to workstations via a policy Anti Executable Policy 39 Anti Executable Policy A Policy is a group of settings An Anti Executable Policy can be created and applied to multiple workstations Multiple Policies can be created as per the reguirement Complete the following steps to create an Anti Executable Policy 1 Right click on the Anti Executable Loadin and select New Policy 2 The New Policy dialog is displayed Specify the name of the policy and click OK Policy Name Cancel 3 The Policy dialog is displayed with the File node Policy Details Defaul ua Files O entries 0 selected Folders Publishers Search P Alerts General Settings Name File Version AE Action E Trusted Date e Publish Temporary Execution Mode 4 la Nr r Add Remove Allow Block Export Identifle Details Close 4 Inthe File node click Add The files added to the Central Control List are displayed Select the files and select Allow or Block from the Add as drop down and click Add Anti Execut
28. f Deep Freeze ends Once Anti Executable exits Maintenance Mode it will add any new or updated executable files to the Execution Control List When Deep Freeze exits its Maintenance Mode it will reboot the computer Frozen with the updated Execution Control List Compatibility is enabled and Deep Freeze status is Frozen This is because It is not possible to set Anti Executable to Maintenance Mode if Deep Freeze changes made to the computer will be lost on reboot If Anti Executable is disabled and Deep Freeze enters Maintenance Mode Anti Executable will continue to be disabled Maintenance periods triggered by Deep Freeze will take precedence over any other Maintenance periods scheduled on Anti Executable For more information on Deep Freeze visit http www faronics com deepfreeze Anti Executable Enterprise User Guide Setup Tab 59 Faronics Anti Virus Compatibility This feature is applicable only when Anti Executable and Faronics Anti Virus are A installed on the computer This option ensures that the executables added to the Local Control List are first scanned by Faronics Anti Virus automatically An executable that is infected is not added to the Local Control List and an alert is displayed Select Enable Faronics Anti Virus compatibility check box to make Anti Executable compatible with Faronics Anti Virus Customizing Alerts Anti Executable Administrators can use the Alerts pane to specify the message and
29. h Mode gives the option to the Administrator to hide the Anti Executable icon in the Windows system tray and prevent the Alert from being displayed When Anti Executable is not visible in the system tray Administrators and Trusted users can launch Anti Executable through the Ctrl Alt Shift F10 hotkey Stealth functionality has the following options Hide Notification prevents the Alert from being displayed e Hide icon on system tray hides the Anti Executable icon in the system tray Compatibility Options Anti Executable is compatible with Deep Freeze and Faronics Anti Virus Deep Freeze Compatibility This feature is applicable only when Deep Freeze and Anti Executable are A installed on the computer The Deep Freeze Compatibility feature allows the Administrator to synchronize the Maintenance Modes of Deep Freeze and Anti Executable By enabling the Enable Deep Freeze Compatibility check box Anti Executable will automatically enter Maintenance Mode when Deep Freeze enters Maintenance Mode Deep Freeze reboots Thawed in Maintenance Mode By setting both Deep Freeze and Anti Executable to be in Maintenance Mode at the same time any executable that is added to the computer will not only be added to the Execution Control List but will be retained by Deep Freeze once it freezes back the computer after the Maintenance Mode ends Anti Executable will stay in Maintenance Mode until shortly before the Maintenance Mode o
30. ic tasks from Faronics Core Console Once the Loadin has been installed Anti Executable can be installed configured upgraded or uninstalled on remote computers from Faronics Core Console Following a successful Anti Executable deployment Faronics Core Console can then be used to administer all Anti Executable tasks and commands Anti Executable features installers for 32 and 64 bit versions of Windows Server 2003 Windows Server 2008 Windows Server 2008 R2 Windows XP SP3 Windows Vista and Windows 7 If you are installing on a remote computer via Faronics Core Console the appropriate installer is selected automatically However before installing manually verify the operating system version and choose the installer from the following list System Install File Windows XP Windows Vista and Windows 7 32 bit AEEnt_32 bit msi Windows XP Windows Vista and Windows 7 64 bit AEEnt_64 bit msi Windows Server 2003 Windows Server 2008 and Windows AESrvEnt_32 bit msi Server 2008 R2 32 bit Windows Server 2003 Windows Server 2008 and Windows AESrvEnt_64 bit msi Server 2008 R2 64 bit Installing Anti Executable Loadin 17 Installing Anti Executable Loadin The Anti Executable Loadin cannot be installed on a computer that does not have A Faronics Core Console installed Anti Executable can be installed using the Setup Wizard To install Anti Executable complete the following steps 1 If Anti Executable has been
31. icy or delete a Policy Whether items in the Central Control List are Allowed or Blocked is defined in the Policy e Execution Control List An Execution Control list defines how Anti Executable must manage a file or Publisher The Execution Control List defines whether the file or Publisher must be Allowed or Blocked Local List of Files and Publishers When Anti Executable is installed for the first time on the workstation there is an option to scan the workstation and create a list of all files and Publishers that are Allowed This list resides on the workstation and cannot be viewed or edited from Faronics Core Each workstation has its own Local List of Files and Publishers very large it might take a long time for the settings to be applied to multiple i Make sure the Central Control List is kept very small If the Central Control List is workstations Anti Executable Enterprise User Guide Create a Central Control List 35 Create a Central Control List When Faronics Core is launched for the first time after installing Anti Executable you are prompted with a message that the Control List is empty Complete the following steps to populate a Central Control List 1 Click Manage Central Control List in the dialog that appears for the first time when Faronics Core is launched after installing Anti Executable for the first time Alternatively right click the Anti Executable Loadin and select Manage Central Control List
32. ils for the selected file 4 Click Apply Click OK Anti Executable Enterprise User Guide 52 Using Anti Executable Users Tab Anti Executable uses Windows user accounts to determine the features available to users There are two types of Anti Executable users Administrator User Can manage Central Control List Local Control List Execution Control List Users and Setup and can uninstall Anti Executable Trusted User Can configure Anti Executable and set the Execution Control List They are prohibited from uninstalling Anti Executable and cannot manage Users or Setup By default the Windows user account which performs the Anti Executable installation becomes the first Anti Executable Administrator User This Administrator User can then add existing Windows users to Anti Executable If an Anti Executable Administrator or Trusted User attempts to open an unauthorized application while Anti Executable is enabled the Alert dialog will be displayed Adding an Anti Executable Administrator or Trusted User Anti Executable Enterprise User Guide All Anti Executable users are existing Windows user accounts However all Windows user accounts do not automatically become Administrators or Trusted users Windows user accounts that are not Administrators or Trusted Users are External users To add a user to Anti Executable perform the following steps 1 Click the Users tab at the top of the Anti Executable window
33. ion e Publishers E Product Name Hash anti executable_cons 4 20 2100 481 02 22 2012 Faronics Corporation Faronics Anti Executa 3D8C1A9C977F52 anti virus_loadin_insta 3 0 2100 137 02 22 2012 alohatest Faronics Anti Virus Lo 1FSFEF426F3E44 deep freeze console 7 21 3220 3447 02 22 2012 Faronics Corporation Faronics Deep Freeze 3D994BC420D672 dfent exe 7 21 220 3447 02 22 2012 Deep Freeze 7 00 EB7AEC8E898071 ntclientemul exe 7 21 220 3447 02 22 2012 Deep Freeze 7 00 2C9C00FC71C433 viewclg exe 7 21 220 3447 02 22 2012 Deep Freeze 7 00 185FE6D 354F32B distd exe 7 21 20 3447 02 22 2012 Deep Freeze 7 00 221287CE791736 ntclientemul exe 7 21 20 3447 02 22 2012 Deep Freeze 7 00 53291A021826B71 viewcfg exe 7 21 20 3447 02 22 2012 Deep Freeze 7 00 E7E227EF506FDE dientserv exe 7 21 270 3447 02 22 2012 Deep Freeze 7 00 50C440DB37E17 eae exe 721 270 3447 02722720 2 Deep Freeze 7 00 FE15A35E3E JOBE as a a a Gna One 7 Click Publishers The list of Publishers on the console computer is automatically added and is displayed Click Add to add Publishers Click Remove to remove the selected publisher Click Import to import a list of Publishers Click Export to export the list of Publishers Files a L Publishers Publishers The following list of Publishers Program Names individual files and file versions is available for granular configuration via individual polici
34. is now Select Yes to restart the Faronics Core Server Service now Select No if you want to manually restart the Faronics Core Server Service later 6 Click Finish to complete the installation Fa aronics Anti Executable Loadin Setup Wizard Completed the Faronics Anti Executable Loadin Setup Wizard Click the Finish button to exit the Setup Wizard www faronics com Version 5 00 2100 504 lt Back Cancel Once the Loadin has been successfully installed Faronics Core Console displays a list of Anti Executable specific features in the Actions pane when one or more workstations have been selected There are also specific columns displayed in the workstation list as illustrated below Anti Executable features are also available by selecting one or more workstations and using the right click contextual menu Anti Executable Enterprise User Guide 20 Installing Anti Executable Installing Anti Executable on a Workstation Manually Before installing Anti Executable on a workstation copy appropriate msi file from the path C Program Files Faronics Faronics Core 3 Loadins Anti Executable Workstation Installers on the computer where the Anti Executable Loadin is installed to one or more workstations To install Anti Executable manually on a workstation after copying the file complete the following steps 1 Double click the msi file to begin the installation process Click Next to continue E Faro
35. isable or Enable Manage AE Users Select this option to manage Anti Executable users Temporary Execution Mode Temporary Execution Mode allows users to run any executable without any action from Anti Executable for a specified period Select a workstation and select Temporary Execution Mode and select 5 15 30 45 60 or Custom Select a workstation and select Temporary Executing Mode gt Disable to disable Temporary Execution Mode Initiate a Local Control List Scan Initiate a Control List scan by scanning for files on the workstation This creates a local list of files and Publishers All the files and Publishers added in the Control List are Allowed by default Reassign Policy Reassign the policy currently applied on the workstation Configure Anti Executable Client Select this option to configure Anti Executable Client on the workstation Install Upgrade Anti Executable Client Select this option to install or upgrade the Anti Executable Client Uninstall Anti Executable Client Select this option to uninstall Anti Executable Anti Executable Enterprise User Guide Accessing Anti Executable via Faronics Core Console 29 Executing Anti Executable Commands via Faronics Core Console Context menu Anti Executable commands can be accessed via the right click context menu Anti Executable commands can also be accessed via Faronics Core Console Actions pane located on the right side of the Faronics Core Console win
36. le scanning Populate the comments field with a custom comment select this option and edit the comment if required These comments are visible in the Central List Create a Central Control List 37 Select where you want to add From E Desktop a 11 My Documents Eil My Computer Le Recycle Bin Documents and Settings Last Release L PerfLogs Program Files ProgramData Recovery System Volume Information Users Windows autoexec bat B B B B B B B E B E Alternatively enter a UNC path Include Sub Folders when scanning R Include DLL files when scanning Populate the comments field with a custom comment added by core PC core on 23 2 2012 5 Add these files to one or more policy in the Policy Update dialog Select Allow or Block from the drop down and select policy to which these must be added Policy Update v Add as to the following policies Default Add Cancel 6 The added files are displayed You can select Remove to remove a selected file Export or Import the list of files You can sort the files based on the title of the column You can also dynamically search for a specific string from the column header Anti Executable Enterprise User Guide 38 Using Anti Executable Anti Executable Enterprise User Guide Files 814 entries 1 selected Publishers File Vers
37. ll have access only to the Status and Execution Control List tabs External users are not permitted to access Anti Executable Anti Executable Administrator and Trusted Users must enter the appropriate passwords to access Anti Executable if those passwords have been set Anti Executable Enterprise User Guide 31 32 Accessing Anti Executable Anti Executable Enterprise User Guide Topics Using Anti Executable This chapter describes the procedure to configure and use Anti Executable Overview Status Tab Execution Control List Tab Users Tab Temporary Execution Mode Tab Setup Tab Creating an Anti Executable Report through Faronics Core Console Anti Executable Enterprise User Guide 33 34 Using Anti Executable Overview Anti Executable provides multiple Control Lists for enhanced protection The following components are available e Central Control List A Central Control List is a repository of files and Publishers When Faronics Core is launched for the first time after installing Anti Executable you are prompted with a message to populate the Central Control List You can populate the Central Control List by adding the files and Publishers on the console computer remote computer on the network or a UNC path e Policy A policy is a group of Anti Executable settings Multiple policies can be created and applied to workstations via Faronics Core You can create a New Policy edit an existing Pol
38. location where the Anti Executable files are unbundled is C Program Files Faronics Faronics Core Loadins Anti Executable Workstation Installers To install or upgrade Anti Executable on one or more workstations complete the following steps 1 Select one or more workstation from the list in Faronics Core Console and select Actions pane gt Anti Executable gt Install Upgrade Anti Executable or right click on a workstation from the list in Faronics Core Console and select Anti Executable gt Install Upgrade Anti Executable 2 Specify the Workstation Credentials There are two options Select Local Workstation Account to use the local workstation account as the first user of Anti Executable Specify the User Name Click OK Select Domain Account to use the domain account as the first user of Anti Executable Specify the Domain User Name Click OK 3 The Customize the Installation dialog is displayed Specify the AE Administrator Password AE Trusted User Password and License Key Select one of the following displayed options e Include DLL files when creating the local control list to include DLL Dynamic Link Library files while scanning e Scan with Faronics Anti Virus before applying local control list to scan the workstation with Faronics Anti Virus before applying the local control list This option is disabled if Faronics Anti Virus is not installed on the workstation Defer workstation reboot after installatio
39. me and path gt file to local pw lt password gt control list as Block Display the path AEC displaylcl allowed blocked xml current local pw Password control list Update License path AEC updateLicense lt License Key gt PW lt password gt Key Legend lt mandatory user input gt optional user input path location where the file being referred to is stored on disk Example Command Line path AEC Protect On pw lt password gt In the above example path is the path to the Anti Executable command line interface file AEC exe Anti Executable Enterprise User Guide 64 Command Line Control Anti Executable Enterprise User Guide Topics Uninstalling Anti Executable Uninstalling Anti Executable on the Workstation via Faronics Core Console Uninstalling Anti Executable Loadin using Installer Anti Executable Enterprise User Guide 65 66 Uninstalling Anti Executable Uninstalling Anti Executable on the Workstation via Faronics Core Console Anti Executable can be removed from one or more workstations using Faronics Core Console To uninstall Anti Executable perform the following steps 1 Open Faronics Core Console 2 Click on the Workstations icon in the left pane of Faronics Core Console 3 Right click on the workstation s in the Workstation List from which Anti Executable will be removed 4 Click on Anti Executable gt Uninstall Anti Executable Aft
40. n to defer reboot after installation A reboot is required for Anti Executable to work properly Click OK to install Anti Executable Anti Executable is installed and the Control List is activated Anti Executable Enterprise User Guide 24 Installing Anti Executable Customize the Installation AE Administrator User Password Optional Enter Password Re Enter Password AE Trusted User Password Optional Enter Password Re Enter Password Installation Options Include DLL files when creating the local control list Scan with Faronics Anti Virus before applying local control list Defer workstation reboot after installation Anti Executable Enterprise User Guide Topics Accessing Anti Executable 25 Overview Accessing Anti Executable via Faronics Core Console Accessing Anti Executable Enterprise on a Workstation Anti Executable Enterprise User Guide 26 Accessing Anti Executable Overview Anti Executable Enterprise can be accessed through Faronics Core Console or directly from the workstation where it is deployed by an authorized user who is logged on Anti Executable Enterprise User Guide Accessing Anti Executable via Faronics Core Console 27 Accessing Anti Executable via Faronics Core Console Anti Executable can be accessed through Faronics Core Console by selecting a single workstation from the Workstations list in Faronics Core Console and opening the Ac
41. ndicates that Anti Executable is protecting a computer based on the Central Control List and Local Control List When set to Disabled any executable can be launched on the computer Publisher A Publisher is the creator of a file A Publisher validates the file by digitally signing it Anti Executable uses the Publisher name product filename and version details to identify the files created by a Publisher Stealth Mode Stealth Mode is a group of options that control visual indication of Anti Executable s presence on a system Stealth Mode provides the option to the Administrator to hide the Anti Executable icon in the Windows system tray and prevent the Alert from being displayed Temporary Temporary Execution Mode allows users to run any executable without any Execution Mode action from Anti Executable for a specified period During this period the user is allowed to run any executable without any restrictions Blocked executables are not allowed to run Trusted A Trusted executable can launch other executables that themselves are Executable unauthorized Unauthorized An Unauthorized executable is one that is not allowed to run Executable Workstation Any client or remote machine using the Operating System specified in the System Requirements Anti Executable Enterprise User Guide 9 10 Introduction Introduction Anti Executable ensures total endpoint productivity by only allowing approved application
42. nics Anti Executable Enterprise Edition Setup Wizard Welcome to the Setup Wizard for Faronics Anti Executable Enterprise Edition The Setup Wizard will install Faronics Anti Executable Enterprise Edition on your computer To continue click Next WARNING This program is protected by Copyright law and international treaties www faronics com Version 5 00 2111 513 2 Acceptthe License Agreement Click Next to continue by Faronics Anti Executable Enterprise Edition Setup Wizard License Agreement Please read the following license agreement carefully Faronics Anti Executable Faronics Corporation Copyright 1999 2012 All Rights Reserved Master Software License Agreement LICENSE GRANT Faronics hereby grants the Licensee a limited non exclusive license to install use access display run or otherwise interact with Use the Product on a computer All other rights are expressly reserved by Faronics 9 I accept the terms in the license Agreement I do not accept the terms in the license Agreement Version 5 00 2111 513 3 Specify the User Name and Organization Click Nextto continue Anti Executable Enterprise User Guide Installing Anti Executable on a Workstation Manually 21 Customer Information Please enter your information User Name EE Organization A Use Evaluation 30 days Version 5 00 2111 513 4 Specify the Destination Folder The def
43. nstalling Anti Executable Loadin Add or Remove Programs 0000 eee uae 69 Anti Executable Enterprise User Guide Topics Anti Executable Faronics Anti Executable is a solution that ensures endpoint security by only permitting approved executables to run on a workstation or server Important Information Technical Support Definition of Terms Anti Executable Enterprise User Guide 6 Anti Executable Important Information This section contains important information about Anti Executable About Faronics Faronics delivers software that helps manage simplify and secure multi user computing environments Our products ensure 100 workstation availability and have freed IT personnel from tedious technical support and software issues Fueled by a customer centric focus Faronics technology innovations benefit educational institutions healthcare facilities libraries government organizations and corporations Product Documentation The following documents form the Faronics Anti Executable technical documentation set Faronics Anti Executable User Guide This document guides you how to use the product Faronics Anti Executable Release Notes This document lists the new features known issues and closed issues e Faronics Anti Executable Feature History This document lists the new features e Faronics Anti Executable readme txt This document guides you through the installation process
44. nti Virus befour applying local control list Click Install to begin the installation Tf you want to review or change any of your installation settings click Back Click Cancel to exit the wizard and terminate the installation process Version 5 00 2111 513 Click OK to restart the computer Click Cancel to restart the computer later Faronics Anti Executable Enterprise Edition Setup Wiz 7 The setup must update files or services that cannot be O updated while the system is running If you choose to continue a reboot will be required to complete the setup Click Finish to complete the installation Installing or Upgrading Anti Executable on a Workstation via Faronics Core Console 23 Installing or Upgrading Anti Executable on a Workstation via Faronics Core Console Installing the Anti Executable Loadin unbundles the Anti Executable install files reguired to protect remote computers the exact files that are unbundled will depend on the edition of Anti Executable that is being installed Agent must be installed on each workstation The Faronics Core Agent enables communication between Faronics Core Console and the workstations on which it is installed For more information on the process to deploy Faronics Core Agent refer to the Faronics Core Console User Guide available at www faronics com library Prior to installing Anti Executable via Faronics Core Console the Faronics Core The default
45. o review or change any of your installation settings Click Cancel to exit the wizard Version 5 00 2100 504 4 Click Yes to restart the Faronics Core Server Service Click No to restart the Faronics Core Server Service later The Faronics Core Server Service must be restarted in order to complete the installation successfully Restarting the Faronics Core Server Service will disconnect all active sessions Would you like to do this now Select Yes to restart the Faronics Core Server Service now Select No if you want to manually restart the Faronics Core Server Service later 5 Click Finish Completed the Faronics Anti Executable Loadin Setup Wizard Click the Finish button to exit the Setup Wizard ANTI www faronics com Version 5 00 2100 504 Anti Executable Enterprise User Guide Uninstalling Anti Executable Loadin Add or Remove Programs 69 Uninstalling Anti Executable Loadin Add or Remove Programs The Anti Executable Loadin can be uninstalled through Add Remove programs To do so click on Start gt Control Panel gt Add Remove Programs gt Anti Executable Loadin gt Remove Uninstalling the Anti Executable Loadin will remove all Anti Executable management capabilities from Faronics Core Console It will not remove Anti Executable installations from the individual workstations Anti Executable Enterprise User Guide
46. o uninstall Anti Executable Anti Executable Enterprise User Guide 30 Accessing Anti Executable Scheduling Actions Anti Executable Enterprise User Guide Anti Executable and Faronics Core Console events can be scheduled to occur on one or more workstations at a date and time convenient to the administrator Click on one or more workstations and select Schedule Action The sub menus which appear contain the following list of available actions Actions controlled by Faronics Core Console Shutdown e Restart e Wake up Actions controlled by Faronics Anti Executable e Protection Enable or Disable e Maintenance Mode e Alerts Enable or Disable e Temporary Execution Mode e Initiating a Control List Scan Install Upgrade Anti Executable e Uninstall Anti Executable Selecting an action displays a Schedule menu that allows the administrator to specify the frequency one time daily weekly or monthly Based on the frequency you can select the specific time day date or month Accessing Anti Executable Enterprise on a Workstation Accessing Anti Executable Enterprise on a Workstation Anti Executable is accessed directly on a workstation double clicking on the Anti Executable icon in the Windows System Tray The Ctrl Alt Shift F10 hotkey sequence can be used as well If you are an Administrator you will have access to the Status Execution Control List and User tabs If you are a Trusted User you wi
47. on the other columns in the Workstation list refer to Faronics Core Console user guide available at www faronics com library Executing Anti Executable Commands via Faronics Core Console Loadin menu Anti Executable commands can be accessed via the right click context menu on the Anti Executable Loadin The following commands are available in the Loadin menu Manage Central Control List This command is used to manage a Central Control List A Central Control List is a repository of files and Publishers The Central Control List can be applied to one or more workstations through a Policy Anti Executable Enterprise User Guide 28 Accessing Anti Executable New Policy A Policy is a group of settings This command is used to create a new policy A policy can be applied to one or more workstations Whether items in the Central Control List are Allowed or Blocked is defined in the Policy Protection To quickly Enable or Disable Anti Executable protection select one or more workstations and click on Protection gt Enable or gt Disable in the Actions pane Maintenance Mode Set Anti Executable to run in Maintenance Mode During this period any executable will be allowed to run The Maintenance Mode is used for installing new applications and application upgrades Keyboard and Mouse Disable or enable keyboard and mouse devices on an individual workstation or multiple workstations by clicking on Keyboard Mouse and selecting D
48. onics Core Console Faronics Core Console is an integrated framework for the management of multiple Faronics products It provides a consistent and reliable method of displaying managing installing updating and protecting workstations and servers from a single console allowing your organization to increase efficiency with a complete management solution for Faronics products Faronics Core Console manages enterprise edition of Anti Executable and Anti Executable Server Anti Executable Enterprise User Guide 12 Introduction System Requirements Console Requirements Information on Faronics Core Console system requirements can be found in the Faronics Core Console user s guide available at www faronics com library Workstation Requirements Anti Executable can be installed on the following operating systems 32 bit edition of Windows XP SP3 and 64 bit edition of Windows XP SP2 32 and 64 bit editions of Windows Server 2003 Windows Server 2008 Windows Server 2008 R2 64 bit only Windows Server 2012 Windows Vista Windows 7 and Windows 8 Anti Executable Enterprise User Guide A Anti Executable Licensing 13 Anti Executable Licensing Anti Executable is available in both Full and Evaluation versions An Evaluation version can be downloaded for free from Faronics web site www faronics com and it will be fully operational for 30 days after installation An expired Evaluation version will not protect th
49. port for all executables launched during Temporary Execution Mode Most Blocked Programs Most Violated Machines Global Report Additions to the Central Control List files Global Report Additions to the Central Control List publishers Global Report Additions to the Local Execution List To view a report right click the workstation s and select Generate Report gt Select the Report The following dialog appears New Report Eal Report Name Report Date 03 26 2012 Report From 03 26 2012 Ey Report To 03 26 2012 Ey Cancel Anti Executable Report displays the following information Time Stamp Machine Info User Info EventID Description Temporary Execution Mode report displays the following information Time Stamp File Name Hash Topics Command Line Control This chapter explains the various Command Line Controls available for Anti Executable Command Line Control Anti Executable Enterprise User Guide 61 62 Command Line Control Command Line Control Anti Executable Command Line Control offers network administrators increased flexibility in managing Anti Executable workstations by allowing for control of Anti Executable via third party management tools and or central management solutions The following commands are available a password has been set Specify the password for the Administrator or the i Use the PW lt password gt switch
50. s rasa sen cee eee k k a k k ee Ee 13 Installing Anti Executable 0 ooo oo ee 15 Installation Overview ks 16 Installing Anti Executable Loadin Lk ks 17 Installing Anti Executable on a Workstation Manually o ooo ooo 20 Installing or Upgrading Anti Executable on a Workstation via Faronics Core Console 23 Accessing Anti Executable 0 0 ooo oooooo ooo uu 25 OVERVIEW sc ic A A ER A a A a aa A 26 Accessing Anti Executable via Faronics Core COnSOle ooo ooooo oo 27 Anti Executable Columns in Faronics Core Console 0 000 eee 27 Executing Anti Executable Commands via Faronics Core Console Loadin menu 27 Executing Anti Executable Commands via Faronics Core Console Context menu 29 Scheduling ActiOnS 4 owg ka k a keis eee k de k RE ee a Da ele k ea al 30 Accessing Anti Executable Enterprise on a Workstation Lk ks 31 Using Anti Executable aaa 33 OVERVIEW ss die cs i Ade tat dls as Atha ty thanks ere adien adk ain ede Asai does th hte Be aad dee cape a ee arene 34 Create a Central Control List or medea iad tacni OE a A 35 Anti Executable Policy sias is kak e a a e a k k koja e a le A a 39 Configuring Anti Executable as 47 Status Tab ss 44 aka shew k BAG K a WE SME EES Ba a OY Ge li PAL a A a es 48 Verifying Product Information assau 48 Enabling Anti Executable Protection a a saaa is 48 Anti Executable Maintenance Mode o
51. s to run on a computer or server Any other program whether they are unwanted unlicensed or simply unnecessary are blocked from ever executing Topics Anti Executable Overview System Requirements Anti Executable Licensing Anti Executable Enterprise User Guide Anti Executable Overview 11 Anti Executable Overview About Anti Executable Faronics delivers software that helps manage simplify and secure multi user computing environments Our products ensure 100 workstation availability and have freed IT personnel from tedious technical support and software issues Fueled by a customer centric focus Faronics technology innovations benefit educational institutions healthcare facilities libraries government organizations and corporations Anti Executable Editions Faronics Anti Executable has four different editions available Whether you have servers or workstations working standalone or as part of a network Anti Executable will provide you with the protection that you need Choose the Anti Executable edition that bests suits your needs Edition Use Anti Executable to protect Standard A single standalone computer loaded with non server operating system Server Standard A single standalone computer loaded with server operating system Enterprise Multiple computers loaded with non server operating system Server Enterprise Multiple computers loaded with server operating systems About Far
52. tab displays the information from the Policy Settings on the Temporary Execution Mode tab cannot be modified on the workstation Settings in the Temporary Execution Mode tab cannot be modified since they are part of a Policy The following options are available for Temporary Execution Mode Faronics Anti Executable lo ke Status Execution Control List Users fi Temporary Execution Mode Setup A The following users have access to Temporary Execution Mode anti Executable Administrators only X Temporary Execution Mode log limitof 4 10 Status Retrieve OK Cancel Help The following users have access to Temporary Execution Mode to allow specific set of users to activate Temporary Execution Mode on their systems Select All Users Anti Executable users or Anti Executable Administrators only Temporary Execution Mode log to create log files during Temporary Execution Mode Number of log files specify the number of log files up to a maximum of 10 The logging information is stored in the files serially For example ifthere are 3 files A B and C Faronics Anti Executable first writes the error logs to file A Once file A is full it starts writing to file B and finally file C Once file C is full the data in file A is erased and new logging data is written to it File size Select the size of each file in MB There can be a maximum of 10 log files of up to 10 MB each i e total 100 MB A
53. tions pane Anti Executable gt Configure Anti Executable Client or right clicking on a workstation from the list and selecting Configure Anti Executable Client Anti Executable Columns in Faronics Core Console The following columns related to Anti Executable are displayed in the Results pane e Stealth This column specifies if Anti Executable is running in Stealth Mode e Protection This column specifies one of the following values Enable When set to Enable it indicates that Anti Executable is protecting a workstation with a Local Execution List Disable When set to Disable any executable can be launched on the workstation Maintenance Mode When in Maintenance Mode new executable files added or modified are automatically added to the Local Execution List when Enable is selected If Disable is selected the changes are not recorded by Anti Executable Temporary Execution Mode When set to Temporary Execution Mode any executable can be launched on the workstation Policy Name Name of the policy applied on the workstation e Version This column specifies the Anti Executable version Logging This column specifies if logging has been enabled or disabled e License Type This column specifies if this is an Evaluation or a Full version Mouse Keyboard This column specifies if the mouse and keyboard of one or more selected workstations are enabled or disabled For information
54. to execute the command on computers where Trusted User as applicable i The switchin is optional Function Command Display path AEC status pw lt password gt Protection Status Enable path AEC Protect On pw lt password gt Anti Executable Disable path AEC Protect Off force pw lt password gt Anit Executable The switch force must be used if Anti Executable is in Maintenance Mode Anti Executable path AEC version PW lt password gt VETOES Note that Command Line Interface does not display the License Key if it exists while the User Interface does Enable path AEC Maintenance duration lt n gt lock Maintenance PW lt password gt MOE Using the command without any switch enables Maintenance Mode Using the switch duration lt n gt enables Maintenance Mode for n minutes The lock switch disables the keyboard and mouse The switch lock must be used with the switch duration lt n gt Change path AEC changePassword lt AEAdmin AETrustedUser gt Anti Executable NEWPW lt New Password gt pw lt Password gt password Changing a password if one exists requires the old password Add a folder or path AEC allow lt file or folder name and path gt file to local pw lt password gt control list as Allow Anti Executable Enterprise User Guide Command Line Control 63 Function Command Add a folder or path AEC block lt file or folder na
55. ure is applicable only when Anti Executable and Faronics Anti Virus are installed on the computer This option ensures that the executables are first scanned by Faronics Anti Virus on the workstation An executable that is infected is not added to the local list of files and Publishers and an alert is displayed Select Enable Faronics Anti Virus compatibility check box to make Anti Executable compatible with Faronics Anti Virus 14 Click the Temporary Execution Mode node Temporary Execution Mode allows users to run any executable without any action from Anti Executable for a specified period During this period the user is allowed to run any executable without any restrictions Once the Temporary Execution Mode period ends Anti Executable is Enabled Anti Executable Enterprise User Guide 46 Using Anti Executable E Policy Details Default ES Files Temporary Execution Mode Folders Publishers tel Alerts The following users have access to Temporary Execution Mode AntiExecutable Administrators only 2 Temporary Execution Mode log limit of 4 rolling log files up to 10 MB 40 MB total disk space Save Close The following options are available for Temporary Execution Mode The following users have access to Temporary Execution Mode select the check box to allow specific set of users to activate Temporary Execution Mode on their systems Select All Users Anti Executable users

Anti-Executable Enterprise User Guide

Contents

Download Pdf Manuals

Related Search

Related Contents