{"id":4341,"date":"2026-06-08T17:56:12","date_gmt":"2026-06-08T14:56:12","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4341"},"modified":"2026-06-08T17:56:12","modified_gmt":"2026-06-08T14:56:12","slug":"how-can-i-block-access-to-a-particular-file-using-application-control","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/how-can-i-block-access-to-a-particular-file-using-application-control\/","title":{"rendered":"How can I block access to a particular file using Application Control?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<ul>\n<li>Is there a way to block users from accessing or running a specific file with Business Suite products such as Client Security and Server Security?<\/li>\n<li>Can you for example block C:\\Temp\\temp.do or even the WithSecure\u00a0 Uninstallation Tool?<\/li>\n<\/ul>\n<h3>Resolution:<\/h3>\n<p>With the help of Application Control file access rules, the admin can block the distribution and execution of a certain file in their environment.<\/p>\n<p>When creating the rule, providing only a\u00a0<strong>file hash<\/strong>\u00a0as a rule condition is enough but may result in\u00a0<strong>performance degradation<\/strong>, because of the need to calculate new digests, especially for big files. To optimize rule performance it is recommended to\u00a0<strong>supply a file size<\/strong>\u00a0as an extra condition for file access rules.<\/p>\n<ol>\n<li>Log in to Policy Manager Console<\/li>\n<li>Select the host or domain from the Domain Tree<\/li>\n<li>Go to the\u00a0<b>Settings\u00a0<\/b>tab<\/li>\n<li>Go to the\u00a0<b>Application control\u00a0<\/b>page<\/li>\n<li>Click\u00a0<b>Clone\u00a0<\/b>to create a custom profile which can be edited<\/li>\n<li>Set the newly created profile as the\u00a0<b>Host profile\u00a0<\/b><\/li>\n<li>Click\u00a0<b>Add rule<\/b><\/li>\n<li>Set\u00a0<b>Event\u00a0<\/b>as <b>File access\u00a0<\/b><\/li>\n<li>Set\u00a0<b>Action <\/b>as<b> Block\u00a0<\/b><\/li>\n<li>Add condition: Target SHA1 &#8211; Equals &#8211; &lt;file SHA1&gt;<\/li>\n<li>Add condition: Target size &#8211; Equals &#8211; &lt;file size&gt;<\/li>\n<li>Click\u00a0<b>OK\u00a0<\/b>to save the rule<\/li>\n<li>Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n<p><b>Note: <\/b>To be able to add the <b>target size\u00a0<\/b>condition, you need to have F-Secure Policy Manager 14.30<\/p>\n<p>This screenshot shows an example how to configure this in Policy Manager Console. This blocks users from launching a &quot;bad&quot; PDF file containing an exploit.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Is there a way to block access to a specific file?<br \/>\nExample: block C:\\Temp\\temp.do<\/p>\n","protected":false},"template":"","support_article_product":[106],"class_list":["post-4341","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000013976","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 14:56:12","import_hash":"90a0f857d49db73496dc12c4c75649fc487b60f5","vanilla_article_id":29618,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/29618-how-can-i-block-access-to-a-particular-file-using-application-control","vanilla_kb_id":30,"vanilla_category_id":103,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/4341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=4341"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=4341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}