Verify that the computer has not been compromised. You must resolve the issue to continue detecting software changes.Įxamine the computer's processes and security events. When a stoppage occurs, Workload Security notifies you through an alert ("Unresolved software change limit") and an event log ("Unresolved software change limit reached"). This stoppage is designed to prevent out-of-memory and disk space errors that can occur if the ruleset grows too large. If unrecognized software changes exceed the maximum, Application Control will stop detecting and displaying all of the computer's software changes. If you don't use maintenance mode during authorized software updates, too many changes can also result in high administrator workload because they must manually create allow rules for each change.
Too many changes make large rulesets that consume more RAM, unless you remove old rules. Reset Application Control after too much software changeįor an overview of Application Control, see Lock down software with Application Control.Īpplication Control is intended for use on stable servers that are not updated frequently, and not for workstations or servers that undergo a lot of software changes.
0 kommentar(er)
