how to block App on Sangfor EPP

for example SketchUp version.

any insights for my question will be appreciated, thanks.

-Jan

Block by Application (Process Name) – Recommended Steps:

Log in to the EPP Management Console

Go to:
Policy Management → Terminal Control → Application Control
Create a New Policy

Add a rule:
Control Type: Block
Application Name / Process Name: e.g. chrome.exe, anydesk.exe

Select target:
Specific endpoint / group
Save & Publish the policy

Steps to Block SketchUp

1.  Log in and Navigate to App Control:
    Log in to your Sangfor Endpoint Secure management console. The Application Control feature is typically found under "Policies" or "Endpoint Behaviors". For version 3.7.12, the path is: Endpoint Behaviors > Behavior Control > App Control. For newer versions like 6.0.4 and above, go to: Policies > App Control > Application Blacklists.

2.  Create a New Policy:
    Click the button to create a new policy, usually labeled "Add" or "New".

3.  Configure the Policy Details:
    Provide the following information for the new policy:
    - Policy Name: Give it a descriptive name, for example, "Block SketchUp".
    - Description: Add any relevant notes.
    - App Category / Application: Select the application to control. Look for "SketchUp" or its executable name (SketchUp.exe) in the list. If a built‑in signature exists, select it.
    - Apply To: Choose the endpoint groups or specific devices where this policy should be enforced.
    - Schedule: Define the time period during which the policy will be active.
    - Action: Select "Block" to prevent the application from running.
    - Status: Ensure the policy is set to "Enabled".

Creating a Custom Signature (If Needed)

If SketchUp does not appear in the built‑in application list, create a custom signature.

1.  Identify the Process Name:
    You need the exact name of the executable file. For SketchUp, the primary process is often SketchUp.exe. You can check this in the "Details" tab of Windows Task Manager while the application is running.

2.  Create the Custom Signature:
    Go to the Application Signatures section, usually found at: Policies > App Control > Application Signatures. Click "New" and fill in:
    - Name: A recognizable name, for example "SketchUp".
    - Process Name: Enter the executable name, such as SketchUp.exe. If the application uses multiple processes, you can list them separated by commas.
    - Other fields like Digital Signature, Product Name, or Icon Hash can help make the identification more robust and prevent bypassing by simply renaming the file.

Final Result

Once the policy is saved and enabled, any attempt to launch the blocked application on a targeted endpoint will be stopped. The Sangfor agent on the endpoint will typically show a notification that the application has been blocked by the administrator.

References:
- https://support.thailand.sangfor ... les/20980225298457-การใช-งาน-App-Control-Behavior-Control-บน-Sangfor-Endpoint-Secure
- https://community.sangfor.com/archiver/?tid-11379.html
- https://community.sangfor.com/archiver/?tid-10247.html&page=1
- https://support.thailand.sangfor ... 37-Process-Objects-การจัดการ-Process-สำหรับนโยบาย-Traffic-Forwarding

thank you so much this information for Application Control this is a huge help.