Trellix Application Control

Trellix Application Control is an enterprise endpoint whitelisting and application control solution engineered to prevent unauthorized executables, scripts, and malicious code from running on corporate servers, workstations, and fixed-function devices. By establishing a default-deny execution policy, it protects critical endpoints from zero-day exploits, ransomware, and unauthorized system modifications without requiring continuous signature updates.

The software functions across Windows and Linux operating systems, managed centrally through the Trellix ePolicy Orchestrator platform across physical and virtual enterprise environments. It integrates with Trellix Endpoint Security and enterprise change management systems to automate software trust validation using trusted paths, publishers, and local administrative privileges. Common operational use cases include locking down mission-critical production servers, securing point-of-sale terminals and ATM machines, preventing unapproved software installations on developer machines, and safeguarding legacy operating systems that can no longer receive vendor security updates.

Featuring dynamic whitelisting algorithms and memory protection mechanisms, Trellix Application Control allows authorized system administrators to apply software updates seamlessly while strictly blocking unauthorized binaries. Security teams gain centralized visibility into blocked execution attempts, unauthorized file modifications, and file checksums across thousands of endpoints. The platform reduces endpoint attack surfaces, eliminates rogue software risks, and ensures adherence to rigorous cybersecurity compliance standards.