The Trellix Application Control Options policy End User Notification, if configured by organization, must have all default variables replaced with the organization-specific data.

An XCCDF Rule

Description

The "User Message" option will show a dialog box when an event is detected and display the organization-specified text in the message.

ID: SV-213337r961479_rule
Version: MCAC-TE-000111
Severity: Medium
References: CCI-001774
Updated: 5 days ago

Remediation Templates

If "End User Notification" is not used by the organization, this is Not Applicable.

From the ePO server console System Tree, select the "Systems" tab.

Select "This Group and All Subgroups".
Select the asset.Select "Actions".
Select "Agent".
Select "Modify Policies on a Single System".

From the product pull-down list, select Solidcore 8.x: Application Control.

From the "Policy" column, select the policy associated with the Category "Application Control Options (Windows)".

On the "End User Notification" tab, select or de-select the "Show the messages dialog box when an event is detected and display the specified text in the message." based upon organization's written policy.

If "Show the messages dialog box when an event is detected and display the specified text in the message." is de-selected based upon written policy, populate "Helpdesk Information" with information from the written policy.

Click "Save".

If "Show the messages dialog box when an event is detected and display the specified text in the message." is selected based upon written policy, populate "Helpdesk Information" with information from the written policy.

Click "Save".

The Trellix Application Control Options policy End User Notification, if configured by organization, must have all default variables replaced with the organization-specific data.

Description

Remediation Templates

A Manual Procedure