Combines Least Privilege and Zero Trust Principles to Help Organizations Thwart Application-related Threats
- Eliminates untrusted applications by building whitelists and blacklists
- Prevents privilege elevation attacks with endpoint privilege management
- Download a 30-day, free trial at https://mnge.it/ACP
AUSTIN, Texas--(BUSINESS WIRE)--ManageEngine, the IT management division of Zoho Corporation, today announced the launch of Application Control Plus, advanced enterprise security software that brings together endpoint privilege management and application control capabilities. The move gives organizations greater authority over their critical applications by enabling control processes based on Zero Trust and threat prevention.
Many security problems arise due to the countless unsupervised applications running in enterprise networks. According to the National Vulnerability Database, the number of application-related security issues has increased 273 percent during the last decade, emphasizing the importance of adopting a Zero Trust approach to application control. Despite enterprise implementations of a Zero Trust model by filtering and controlling applications, attacks leveraging applications’ privileged access persist. A combination of whitelisting, blacklisting and administering application-specific privileges is required to tackle the application-related threats.
"Applications are ubiquitous and incredibly conducive to the productivity of any enterprise. However, they are also the biggest threat vectors in a network, so IT admins constantly have their hands full with application maintenance and access management," said Mathivanan Venkatachalam, vice president of ManageEngine. "By taking on a trust-based approach to filtering and controlling software, enterprises can eliminate a huge percentage of their security challenges."
A Comprehensive Solution for Application Control and Security
Application Control Plus helps enterprises gain a holistic view of their network by aiding in the instant discovery and categorization of authorized and unauthorized applications. With application-level privileged management and dynamic, rule-based whitelisting and blacklisting, Application Control Plus ensures only authorized access occurs, minimizing an enterprise’s attack surface.
A comprehensive application control solution for Windows environments, Application Control Plus curbs both security breaches and nonproductive use of employee time by ensuring that only authorized applications are running.
Application Control Plus' enterprise-oriented highlights include:
- Malware prevention: Limits the chance of malware intrusions and strengthens endpoint security by enabling IT teams to block malicious executables and allow only trustworthy applications.
- Rule-based list building: Simplifies list management by enabling IT teams to build application whitelists and blacklists based on rules like product, vendor, folder path, hash value and whether executables have valid certificates.
- Endpoint privilege management: Allows enterprises to establish the principle of least privilege on an organizational level by running business-critical applications with restricted privileges. It also prevents attacks based on privilege elevation or credential compromise by enabling need-based elevated access to applications.
- Flexible operation modes: Offer Audit Mode to enable admins to keep tabs on frequently used applications that have not been whitelisted or blacklisted yet. After quickly redefining their whitelists to include all critical applications, admins can switch to Strict Mode to allow only whitelisted apps to run.
- Controls to improve productivity: Allow blacklisting of applications that might hinder productivity, or are in general inessential to the seamless functioning of the organization. This expedites the admin’s management efforts.
Keval Sukhadia, deputy vice president, IT, at RBL Bank, was given early access to Application Control Plus. Commenting on his company’s experience with Application Control Plus, Sukhadia said, "Our bank was looking for an application control tool that would help us exercise control at the most granular executable level. The well-timed rollout of Application Control Plus' beta ensured that all our requirements were met. With easy onboarding, this flexible solution fit right into our enterprise, ensuring heightened security."
Going forward, ManageEngine plans to extend the capabilities of Application Control Plus to support macOS and other operating systems.
Pricing and Availability
Application Control Plus is available immediately at https://mnge.it/ACP. Pricing starts at $10 per year, per license. A fully functional, 30-day trial is also available, as well as the Free edition for startups and small businesses to manage up to 25 computers.
About Application Control Plus
Application Control Plus is an on-premises solution that enables effortless creation of application whitelists and blacklists for Windows machines. It helps enterprises enforce policies to control and authorize application access, prevent malware threats and tackle productivity loss. Application Control Plus’ flexibility ensures all graylisted applications are managed efficiently according to enterprise requirements.
ManageEngine is the enterprise IT management division of Zoho Corporation. Established and emerging enterprises — including 9 of every 10 Fortune 100 organizations — rely on our real-time IT management tools to ensure optimal performance of their IT infrastructure, including networks, servers, applications, desktops and more. We have offices worldwide, including the United States, the Netherlands, India, UAE, Mexico, Singapore, Japan, China and Australia as well as a network of 200+ global partners to help organizations tightly align their businesses and IT. For more information, please visit www.manageengine.com; follow the company blog at blogs.manageengine.com, and on LinkedIn at www.linkedin.com/company/manageengine, Facebook at www.facebook.com/ManageEngine and Twitter @ManageEngine.
(925) 924-9500, ext. 7292