ThreatDown Application Block

SOLUTION OVERVIEW

The prevention of unwanted applications running on endpoints thanks to  ThreatDown Application Block

Every Windows application is a potential entry point through which cybercriminals can get in and wreak havoc. In a seemingly legitimate application, would-be intruders can embed malicious code that an end user can unknowingly execute simply by running the application. Hackers can also exploit an app with a vulnerability that has not been patched. Left unchecked, apps expose you to the risks and costs of cyber attacks, and can expose you to fines for non-compliance with data protection regulations. ThreatDown Application Block helps you better prevent cyber attacks and stay compliant with governance regulations. The feature makes it easy to identify and block untrusted or unwanted Windows applications without adding to the complexity of security management. Once activated, ThreatDown Application Block is immediately available, extending the capabilities of the cloud-based platform, the same one used for endpoint protection.

FEATURES

Block untrusted applications
ThreatDown Application Block easily blacklists unsafe, outdated and unused applications on all Windows endpoints from one central location.
- Ensures that blacklisted applications cannot be run from Windows laptops, desktops or servers 
- Offers a simple alternative to the sometimes time-consuming task of uninstalling obsolete applications or those you no longer use across your organization: blacklist an application in Nebula and you're done.
- Prevents cybercriminals from exploiting blacklisted applications that cannot be used to smuggle malware into the digital environment. 

Block vulnerable applications
The years 2021 and 2022 were record years for the number of Common Vulnerabilities and Exposures (CVEs) reported. To protect your data, you need to block these potential entry points. However, even large enterprises with vast resources are struggling to patch network endpoint vulnerabilities. Combined with Vulnerability Assessment, Application Block provides a simple, effective and secure alternative to the complex, time-consuming task of testing and applying patches:
- Using Vulnerability Assessment to identify applications with known vulnerabilities.
- Using Application Block to blacklist applications with vulnerabilities that don't have patches or have patches that you don't have time to test and deploy.
By blocking unpatched applications with known vulnerabilities, you prevent cybercriminals from exploiting those vulnerabilities to break into your network and encrypt, steal or disable corporate data.

Compliance
With the Application Block tool, you can reduce the risk of incurring fines or criminal charges for non-compliance with data protection regulations such as the RODO. The ability to record and report on application blocking activities helps demonstrate compliance with data regulations.

ThreatDown Application Block is included in every available package and so CORE, ADVANCED, ELITE and ULTIMATE.