Contributor:
Kris Zentek
February 20th, 2012

Policy Filtering for Computers and Remote Clients

For version 3.0, we have redesigned the how Policy Filters are configured and applied. Two distinct benefits came out of this.

  1. Granular targeting is now a lot more intuitive in terms of applying combinations of Policy Filters.
  2. It is now a lot easier for us to add additional filters to Privilege Guard.

The new Computer Filter allows you to target Privilege Guard (Edit: now Defendpoint) Policies based on the hostname or the IP Address of the endpoint. This can be used as an alternative to, or in combination with, Group Policy based computer targeting.

Policy Filters in 3.0

Policy Filters in 3.0

Hostnames can be defined as an explicit list in each Computer Policy or, if you use a naming convention within your infrastructure, you can use wildcards to target a wider scope of computers.

If you prefer to use IP Addresses, then these can also be defined as explicit lists. You can also add wild cards and ranges to any octet in the IP Address, for example:

Apply IP Address Filters using Wildcards

Apply IP Address Filters using Wildcards

In addition to local computers, Privilege Guard Policies can also target privileges based on remote clients connecting via Remote Desktop Services. This means that privileges can be granted or revoked depending on the relative location of the user.

For example, you can now grant admin rights for an application, script or task to a user who is connecting from within the corporate network (based on IP Address), but prohibit admin rights to the same user if they are connecting through a tunneled VPN.

Used in combination with application whitelisting, the Computer Filter can also be used to restrict access to corporate applications licensed under volume license and client license agreements.

Introducing Defendpoint

Edit: Privilege Guard has now evolved into the brand new security suite, Defendpoint, which encompasses Privilege Management, Application Control and Sandboxing. For more information, please visit www.avecto.com/defendpoint.

More from the Blog

Related technology and security insights

  • 27
    Feb
  • Story related

    Security basics provide the best foundations

    In the era of next-gen technology, it's the often-forgotten basics that provide the best foundations. By reducing the attack surface and building secure defensible endpoints you'll be in a far better position to stop cyber attacks and keep your data ...
  • 27
    Apr
  • A call to our customers

    Avecto is listed as an official security provider in the Endpoint Protection Platforms category on ...