Preventing the Installation of Unwanted Applications
Netsweeper is capable of restricting the download of files based on the extension. However, this is only capable of stopping a download. If the file is already on a workstation we can't stop a user from installing something directly.
Your IT policy should prevent people from installing unknown software, but by using Netsweeper you can also prevent downloading.
Blocking File Extensions
Please Note: While the below steps specifically refer to Local Lists, these rules could also be applied to a Shared List, depending on your needs and the scope required for these rules.
Netsweeper Lists allow you to block certain file extensions from being downloaded. To add an extension to a Local List:
- Go to your Policy's URL/Keyword Local List tab and click the New Entry button to display the 'New Entry' window.
Enter the extension name exe without a period in the New Entry field. - Select Entry Type as File Extension and select the Action: 'Deny'.
- Click the Save Entry button.
- Repeat these steps for other extensions you would like to block
You can test this by finding a URL for an executable and running a Trace URL Request from the URL Tools Menu.
Note: Users can still bring installers into the network with a USB Key and install it if your computer policy does not prevent installation or usage of USB drives.
For more information on extension blocking please see our documentation here: File Extension List Entry Type
Client Filter and Blacklisting Software
If you are using the Netsweeper Client Filter product there is an option during branding where certain applications can be blacklisted. Please speak to your Netsweeper Account Manager for more information.