Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to filter out Application Control alerts being forwarded to Policy Manager Console?

Issue:

We need to filter out Client Security or Server Security Application Control alerts being forwarded to Policy Manager. How can i change this alert setting in Policy Manager console and distribute it as a policy to clients? I do not want to receive Application Control security alerts to the Alerts page in the Policy Manager nor do I want email alerts. 

Resolution:

If you do not want an Application Control rule to send an alert, this can be changed in the Application Control rule itself:

  1. Log in to the Policy Manager Console
  2. Select a host or policy domain from the domain tree
  3. Go to the Settings tab
  4. Navigate to the Windows > Application control settings page
  5. Select a rule from the table and click Edit rule
  6. Disable the "Send alert" setting
  7. Click OK
  8. Distribute the policy (Ctrl + D)

Now when this Application Control rule is triggered on a client, it will not send an alert to the Policy Manager Console. Since there is no security alert no email alert will be sent either. 

If you do not want to edit rules manually, you can filter out all Application Control alerts from the Alert sending settings:

  1. Log in to the Policy Manager Console
  2. Select a host or policy domain from the domain tree
  3. Go to the Settings tab
  4. Navigate to the Windows > Alert Sending settings page
  5. Click Add on the right side of the table
  6. Select as condition: Source = Application Control 
  7. Click OK
  8. Distribute the policy (Ctrl + D)