Symantec Application Control

Broadcom Symantec Application Control is an enterprise endpoint security and application whitelisting solution designed to enforce strict operational integrity and prevent unauthorized executable code from running on corporate workstations and server infrastructure. Operating as an advanced component of the Symantec security suite, Application Control enforces a zero-trust execution model, ensuring that only verified, cryptographically signed, and authorized applications can launch, effectively eliminating the risk of unknown malware, unauthorized software installations, and zero-day exploits.

The software provides security administrators with granular policy controls that govern not only which applications can execute, but also how those applications behave once launched. Key capabilities include executable and script whitelisting, dynamic file reputation checking via the Symantec Global Intelligence Network, strict control over DLL loading and process memory injection, granular access restrictions for sensitive registry hives, and device control for removable USB storage. By restricting application behavior, Application Control prevents legitimate corporate software—such as web browsers or office suites—from being weaponized by attackers through memory-corruption exploits or script-based child process spawning.

Symantec Application Control connects directly with Symantec Endpoint Protection Manager (SEPM), Active Directory, and enterprise logging systems such as Splunk and IBM QRadar. Primary enterprise use cases include hardening critical servers and virtual machines against ransomware, locking down automated kiosks and point-of-sale terminals, preventing shadow IT software usage, and demonstrating adherence to regulatory compliance frameworks including PCI-DSS, HIPAA, and ISO/IEC 27001. Symantec Application Control ensures ironclad endpoint integrity and operational compliance.