<div dir="ltr"><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)">The BigFix Team is pleased to announce the release of version 2.0.0 of BigFix Application Control. </p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)">The main reasons to upgrade to this release are as follows:</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)"> <strong> Application Control (WDAC)</strong></p><ul class="gmail-ak-ul" style="margin:12px 0px 0px;padding:0px 0px 0px 24px;box-sizing:border-box;display:flow-root;color:rgb(41,42,46);font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;font-size:14px;background-color:rgba(5,21,36,0.06)"><li><p style="margin:0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714"><strong>Overview</strong><br>BigFix Application Control provides application allowlisting and blocklisting for Windows endpoints using Windows Defender Application Control (WDAC). It enables administrators to deploy, manage, and monitor application control policies from the BigFix platform.</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">This release includes policy deployment, enforcement, and reporting capabilities.</p></li><li style="margin-top:4px"><p style="margin:0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714"><strong>New Features</strong><br>WDAC Base Policy Deployment<br>• Deploy Microsoft-provided WDAC base policies to Windows endpoints<br>• Policies are deployed and activated using BigFix Fixlets</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Supplemental Policy Deployment<br>• Deploy WDAC supplemental policies to endpoints with an active base policy</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Centralized Policy Management<br>• Manage WDAC policies from the BigFix Console<br>• Support for publisher, file hash, and file path rules<br>• Support for Audit and Enforcement modes</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Monitoring and Reporting and Audited Application Blocks<br>• Collect and report applications that would be blocked in Audit mode<br>• Validate application impact before enforcement</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Blocked Application Reporting<br>• Report blocked application execution events in Enforcement mode<br>• Includes application name, file path, hash, publisher, rule, and timestamp<br>• Events aggregated across endpoints to identify frequently blocked applications<br>• Identify impacted endpoints and analyze block patterns</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Active Policy Monitoring<br>• View active WDAC policies on endpoints<br>• Includes base and supplemental policies and enforcement mode<br>• Verify policy enforcement and ensure compliance across endpoints</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Deployment Status Monitoring<br>• Track policy deployment status across endpoints<br>• Identify failed or incomplete deployments</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Policy Management and Policy Removal<br>• Remove WDAC base or supplemental policies from endpoints for rollback or recovery</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Security<br>• Policies are securely signed to ensure integrity<br>• Role-based access control for policy operations</p><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Performance and Scalability<br>• Support for large-scale deployments<br>• Minimal impact on endpoint performance during enforcement<br>• WDAC policies applied without reboot</p></li></ul><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)"><strong>Additional information about this release</strong></p><ul class="gmail-ak-ul" style="margin:12px 0px 0px;padding:0px 0px 0px 24px;box-sizing:border-box;display:flow-root;color:rgb(41,42,46);font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;font-size:14px;background-color:rgba(5,21,36,0.06)"><li><p style="margin:0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Published site and components version:</p><ul class="gmail-ak-ul" style="margin:4px 0px 0px;padding:0px 0px 0px 24px;box-sizing:border-box;display:flow-root"><li><p style="margin:0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">Application Control - Site Version: 02</p></li></ul></li></ul><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)"><strong>Useful links</strong></p><ul class="gmail-ak-ul" style="margin:12px 0px 0px;padding:0px 0px 0px 24px;box-sizing:border-box;display:flow-root;color:rgb(41,42,46);font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;font-size:14px;background-color:rgba(5,21,36,0.06)"><li><p style="margin:0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:1.714">BigFix Application Control Documentation:<br><span class="gmail-loader-wrapper"><span class="gmail-hover-card-trigger-wrapper"><a href="https://help.hcl-software.com/bigfix/11.0/lifecycle/lifecycle_application_control.html" tabindex="0" role="button" class="gmail-_1yt4x7n9 gmail-_2rko1ssi gmail-_v56415x0 gmail-_1e0c1nu9 gmail-_16d9qvcn gmail-_syaz13af gmail-_1rkwglyw gmail-_4cvx1w55 gmail-_19itia51 gmail-_bfhkhp5a gmail-_1a3b18uv gmail-_4fprglyw gmail-_5goinqa1 gmail-_9oik18uv gmail-_1bnxglyw gmail-_jf4cnqa1 gmail-_1nrm18uv gmail-_c2waglyw gmail-_1iohnqa1 gmail-_uizt1kdv gmail-_nt751r31 gmail-_49pcglyw gmail-_1hvw1o36 gmail-_1372tlke gmail-_7ehiw5lj gmail-_1j5pglyw gmail-_1di615s3" style="color:rgb(24,104,219);text-decoration-line:none;padding:2px 0px;border-radius:4px;border-color:rgba(11,18,14,0.14);border-style:solid;border-width:1.25px;display:inline;background-color:rgb(255,255,255)"><span class="gmail-_19itglyw gmail-_vchhusvi gmail-_r06hglyw gmail-_o5721jtm gmail-_1nmz9jpi gmail-_16d9qvcn gmail-_ca0qv77o gmail-_u5f31b66 gmail-_n3tdv77o gmail-_19bv1b66" style="border:none;box-sizing:border-box;padding:2px 4px;word-break:break-all"><span class="gmail-_19itglyw gmail-_vchhusvi gmail-_r06hglyw gmail-_1e0c1o8l gmail-_2hwx1b66 gmail-_kqswh2mm" style="border:none;box-sizing:border-box;display:inline-block;margin-right:4px;line-height:1"><span class="gmail-_19itglyw gmail-_vchhusvi gmail-_r06hglyw gmail-_1bsb7vkz gmail-_4t3i1osq gmail-_1e0c1o8l gmail-_tzy4idpf" style="border:none;height:0px;box-sizing:border-box;opacity:0;display:inline-block;width:1pc"></span></span><span class="gmail-_19itglyw gmail-_vchhusvi gmail-_r06hglyw" style="border:none;box-sizing:border-box">Application Control</span></span></a></span></span> </p></li></ul><p style="margin:0.75rem 0px 0px;padding:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:14px;line-height:1.714;font-family:"Atlassian Sans",ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Ubuntu,"Helvetica Neue",sans-serif;color:rgb(41,42,46);background-color:rgba(5,21,36,0.06)"> – HCL BigFix – Lifecycle Team</p></div>