Blocking of applications can be implemented in different parts of the product:

• App Discovery—when reviewing apps that are in use in your organization.
• Application Settings—a policy component that enables blocking of all supported apps, regardless of usage.

Controlling an App

1. Navigate to Reporting > Additional Reports > App Discovery.
2. From the overview, click the number of unreviewed apps. The App Grid appears.
3. Look for an app with Control this app or Block this app link visible in the Label column:

4. Click on Edit app controls, Control this app or Block this app to open the control window. This can also be done within App Details.

5. In the window that appears, select the application settings in which to include this app. Selecting a label will help with filtering and reporting. Then click Save to complete the configuration.

Configure Application Settings in a Policy

You can also block application categories or specific apps by configuring Application Settings in your policies. For a full list of application categories, see Understanding Application Categories.

Adding Application Settings to a Policy

1. Navigate to Policies > Management > DNS Policies or Web Policies.
2. Click Add to add a new policy.
3. Under Select Your Protection, enable Application Control by selecting the box. Any other features for this policy can also be enabled. When you have selected all desired features, click NEXT.

4. The policy wizard will walk you through various settings for the features you enabled for this policy. When you reach the Control Applications section, choose which apps you wish to block for this policy.

You can choose to block apps by selecting an Application Setting or creating a new setting. (This can also be done in Policies > Policy Components > Application Settings.)

Each category features a drop-down that lists the apps blockable for that category. You can choose individual apps within categories to block or the entire category.

5. When an app is selected, a Block option with a gear icon appears to apply to the app. Click the gear icon to Block or Allow this app in this policy.

6. Once all desired apps have been selected to be blocked for this setting, click NEXT.

Note: Some apps require you to enable the intelligent proxy with SSL decryption in your policy. If your policy does not use SSL decryption, you are prompted to enable it if you try to select apps that require it.

7. The next step of the policy wizard enables you to set up the Block Page. For Application Control, the Block Page will appear when an end-user attempts to install an app that is blocked by the policy. You can choose and preview Umbrella's default Block Page or create a custom or existing Block Page. When you have configured the appropriate Block Page, click NEXT.
8. The last step of the policy wizard is a summary to verify all enabled features and name the policy. Application Control should be one of the features enabled in the summary. Name your policy and click SAVE.

You have now enabled Application Settings within a policy.

Editing an Existing Policy for Application Control

1. Navigate to Policies > Management > DNS Policies or Web Policies.
2. Click on the Policy you wish to edit.
3. The policy summary opens and lists the features enabled for this policy. Under Application Control click Enable if disabled, or Edit to configure.

4. You are brought to the Application Control step of the policy wizard. Choose the application setting you wish to block for this policy, as explained in steps 5 and 6 of Adding Application Settings to a Policy.

5. When all apps desired are selected, click SET & RETURN.

6. An Application Control Change Summary appears to verify the changes. Click PROCEED.

The policy summary page will open and the feature for App Control should now be enabled and/or updated to list the apps blocked in the policy:

7. Click SAVE to save the changes to the application controls for this policy.

Disabling an Application Setting in a Policy

1. Navigate to Policies > Management > DNS Policies or Web Policies.
2. Click on the Policy you wish to edit.
3. The policy summary opens and lists the features enabled for this policy. Under Application Control click Disable.
4. Click SAVE to disable the setting in the policy.

Gather Details About an App < Block Apps > Understanding Application Categories