Ivanti Application Control for Splunk

The Ivanti Application Control App for Splunk allows a Splunk® Enterprise administrator to see what’s being blocked, allowed and elevated by the Application Control product (formerly AppSense Application Manager) within their environment. Support staff will be able to clearly see who’s been impacted by application whitelisting, IT staff will be able to see where additional whitelisting rules are required, based on the most blocked executables in their environment. IT will be able to see the most commonly elevated applications and installers and the reasons given by users for elevating them. By integrating a customer’s existing asset and identity information, IT will benefit from context, for example: * the job title of the user being prevented from installing TeamViewer; * the business unit most impacted by an incomplete ruleset; * the asset owner of a laptop with a local account that keeps trying to install unauthorised software.