Loading

Denylist

Skip Feed
  1. Denylist Reporting or Search | Good idea to expose denylist criteria comment?

    Organisations have many reasons why they wish to add an application to a Denylist. e.g Retired Title; Application Type; Security Risk etc

    When you setup a Denylist application or application type or application manufacturer etc you have the option to add a criteria comment.

    • Standard DenyList report by computer: does not allow criteria comment exposer or any application custom fields
    • Standard DenyList report by user: does not allow criteria comment exposer or any application custom fields
    • All Applications report: does not allow criteria comment exposer
    • Search all Applications: does not allow criteria comment exposer

    So that you don't have to necessarily set up additional custom fields it would be great to be able to give the denylist criteria comment once and expose it via Search or Reports!

    What does the community think?

     

    I have created an Idea (IDEAS-I-2024). When it is live I will update this post.

    Expand Post

    1 of 3

  2. 1 of 2
    • If you are metering it will still show up in inventory until meeting period is over. I always add the column "installed" and select yes for the reports. It will show installed only.   

  3. Blacklisted items- exclude?

    Is there a way to exclude a specific software title from the Blacklisted applications. For instance, we added the criteria type Games -% to the Application Blacklist. The security team asked to have the Microsoft Games that come on the Windows OS image to be excluded from the report. There are 8 Microsoft games that they want "not" in the scheduled report they get. 

    If I edit those applications, I see there is a "Do not alert on usage for this application". Will that exclude it from the Blacklisted applications report? 

    Or is there another way to do this? 

    Expand Post

    • Hi, We had exactly the same issue, I think. We used a little trick we found, which is discussed here on the community. I hope that helps. Let me know how you get on. It used to take a couple of DUJs before it took effect, but I am not sure now, because the DUJ has changed since then. Regards, David

  4. SRS and blacklisted applications

    Hi,

    Is there any way for SRS to automatically locate and mark applications as blacklisted? Or is this information not provided with the SRS?

    If no, I guess application blacklisting is a manual task and that you have to define your own criterias? If so, is there any best practice document available how to work with application blacklisting and what applications to actually blacklist?

    Thanks in advance,

    Dennis

    Expand Post

    1 of 4
    • Hi Dennis, Blacklisting is a manual task but it relies on patterns rather than single application names. Because of this, it is practical enough to blacklist a whole application family. It is also possible to set a blacklisting pattern based on the application type. The types are set through SRS by Snow and include the international software type categories augmented by a set of additional categories created by Snow. Here is an excellent article from the community by that will help you:  
      Expand Post

    • Community Manager (Flexera Software)

      Hi Gemma, you can blacklist web applications just like on premise applications. Go to the application, hit the three dots and set this application as blacklisted. Alternatively set blacklisted criteria via Home -> Administration -> Application blacklist. Did I get your thoughts right? /marcel

  5. Update application blacklist (mass import)

    Hello Snow Community,

    In our company we would like to add all outdated applications to the blacklist. As you can imagine, there are a lot of criteria to be added manually referencing the name of the affected software.

    Maybe anyone of you has a good solution how to do that? Something like a mass import to update the blacklist?

    Thanks!

    Eugen

    Expand Post

    1 of 4
    • Hi Eugen, Unfortunately you can only load one app at a time through the front end (painfully slow...) and you can't import a list any other way. There are a couple of threads already on this issue/feature request so you'll need to sit tight unfortunately   and    I do have a bulk import 'feature' available to me as we can insert the data into a SQL table and then there is a custom snow stored proc that is run to import the data. You would need to contact snow to get this unfortunately and you will need access to the db (depends on if your hosted or not)
      Expand Post

  6. Blacklisted applications which have been removed
    We use blacklisting. So if something on our blacklist is detected by Snow, then we can remove it from the computer. However, there's a problem. After removing the blacklisted software, it continues to be reported by Snow, both in the SLM user interface, and on reports, like "Blacklisted applications per computer". Here is an example, where the blacklisted item was uninstalled a couple of months ago . It still shows in SLM, like this: ...and it also still appears in the "Blacklisted applications per computer" report. We think this happens because there is still metering data for this application. So we would need to wait until the metering period has expired before this blacklisted application disappears... Is this a common problem? With our example, we have made absolutely sure that the application has been removed, but Snow continues to report it two months afterwards. Unfortunately, this makes Snow appear to be inaccurate. For us, it's quite a big issue because we can't know if blacklisted software is installed or not. We think it would be better if Snow identified blacklisted applications that have been uninstalled . Is that possible?
    Expand Post

    1 of 8
    • Hi, I believe, as you have eluded to,  that this is due to the "METERING_HISTORY_MONTHS" configuration. As we are on a hosted platform I don't get access to this, but believe the default is 3 months. I don't believe that there is currently a way to delete metering history for a specific application, but you can for all via the "METERING_HISTORY_CLEANUP". From what I have read, this only clears history for all data prior to the number of days in the "METERING_HISTORY_MONTHS" setting. e.g. if period is 30 days then the clean-up will delete all data for 31 days and older. Setting the period to 0 or 1 day may get results in regards to blacklisted applications, but you will want the history of all the other applications. There should be a way to remove the history of individual applications I think. Regards Greg
      Expand Post

  7. E-mail notification on blacklisted applications

    Hello there,

    Is there a possibility to send e-mail notification on new installations of blacklisted applications?

    I know there is the possibility of reports but I want an e-mail to be sent every time Snow detects that a blacklisted application has been installed.


    1 of 2
    • Hi Maximilian, You could probably create a customised report in SMACC, but you would need a good knowledge of SQL to create this. Alternatively you could try the following (it won't necessarily alert you, but would give you the means to find the information you require.)  - Create a custom report starting with "All applications" and adding the "Blacklisted" from the column selector.Change the dropdown in the blacklisted report to yes and save the custom report. - Schedule the custom report to run daily. - Compare the reports day by day. When you see a variance in the numbers, go to the "List all applications" screen and filter by the blacklisted application which has increased in number. When you then click on the blacklisted application you can sort by "Installed Date". This will tell you which device it was installed on yesterday. Maybe not as good as a custom report, but it could be a solution Regards Greg
      Expand Post

End of Feed
8 Chatter Feed Items
ALL CONVERSATIONS
UNSOLVED
ARTICLES
11 Posts
Loading
Denylist | Flexera