Adding Process Termination Policy

Create process termination policy for the agent computer to block processes usually used by malware or processes prohibited by the organization.

To add a process termination policy:

1. Click Policy/Advanced Rules on the top.
2. Select the Policy tab.
3. Click Add.
4. Click Add > Process Termination Policy.
5. Enter the required fields in Add Process Termination Policy.

• Process Termination Settings: Select whether to enable process termination. When enabled, the processes will be blocked according to the conditions set by the user.
• Other Settings: Specify the notifications for logs and blocked processes.

6. To save the settings, click Save.
7. In <Add Policy>, specify the policy name and target to apply the policy.

Note

If you click OK without specifying the target, the policy will be saved, but not applied.

• Name: Enter the policy name.
• Target: Specify the target to apply the policy.
• Description: Enter the policy description.

8. Click OK.
9. The message, "Are you sure you want to apply the policy to the selected target?", will appear. To apply the policy, click Yes, and click No if you do not want to apply the policy.

Process Termination Settings

Add the processes to block or modify created processes.

• Enable Process Termination Policy: Select whether to enable Process Termination Policy. When enabled, the processes will be blocked according to the conditions set by the user.

• Process Termination Interval: Specify the process termination interval between 1 and 60 minutes. (Default: 5 minutes)

• Add: Add the process to block. Click Add to add the process.

• Process Name: Enter the process name to block.
• Action for Process: If the process to block is running, select the action for the process.
• Send notice: If the process to block is running, send a notice to the user and then block it.
• Forced termination: If the process to block is running, the agent can force-terminate the process.
• Send notice after forced termination: If the process to block is running, the agent can force-terminate the process and then notify the user.

• Modify: Modify a blocked process. Select a process from the list, and then click Modify.
• Process Name: Enter the process name to block.

Other Settings

• Collect logs of active process on client computers: Collect logs of active processes.
• Alert the user with a message when the process is forcefully terminated: Enter the alert to display on the agent's screen when a process is terminated.

Note

<Message Restriction>
- Maximum number of lines: 5
- Maximum number of characters per line: 23 Korean characters or 50 alphabets