Step 1.Make sure that your Athena NGFW device is connected to Endpoint Secure Manager. To connect Athena NGFW to Endpoint Secure Manager, go to SOC > Next-Gen Security > Endpoint Protection > Endpoint Protection Options.

Step 2.Go to SOC > Specialized Protection > Endpoint App Control. Create the custom endpoint application according to the list. For example, select chrome.exe as a custom application.

App Name: Set the application name.

Description: Set the description of the custom application.

Original File Name: The file name collected by the Endpoint Secure agent.

App Category: Set the application category.

Status: Set whether to enable or disable the custom endpoint application.

Step 3.After Endpoint Secure is connected, configure an endpoint app control policy. Go to Policies > Access Control > Application Control to configure the policy. Select the custom app that was created earlier.

Name: Set the name of the endpoint app control policy.

Status: Set the policy as Enabled or Disabled.

Description: Set the description of the endpoint app control policy.

Policy Group: By default, all endpoint app control policies will belong to the Integration Policy Group.

Tags: Select the policy tag. This parameter is optional and can be set for displaying a specified zone or filtering.

Endpoints: Select the endpoint’s IP to be controlled.

Applications: Select the applications that are needed to control.

Schedule: By default, the policy will run all week.

Action: Set the policy to Allow or Block.

Step 4.After 5 to 10 minutes, view the endpoint app control status for the endpoint on Endpoint App Control.

Result Demonstration

In the endpoint, run the Chrome application. The Endpoint Secure agent will block the Chrome application from running and prompt the alert.