In our organization, we use Airlock Digital Application Control for granular application control and to prevent unauthorized applications, DLLs, and browser extensions which can be vulnerable to our organization's internal computers and databases.
We use Airlock Digital Application Control to prevent vulnerable applications and end-of-life applications which can be vulnerable for execution in the organization.
Application controls provide broad execution coverage across application libraries and DLLs with contextual restrictions. We can check for files which are uploaded in the application or in browser extensions.
Since implementing Airlock Digital Application Control, we have gained visibility into application usage and how users are utilizing it.
We are receiving notifications of vulnerabilities if vulnerabilities exist. The compliance aspect has improved significantly because the control includes granular control methods and compliance features.
The VirusTotal overlay is a standout feature for me. Airlock Digital Application Control integrates natively with Google's VirusTotal so that global intelligence is directly available to end security teams, allowing them to instantly spot non-malicious or suspicious files. The intelligence and visibility that Airlock Digital Application Control provides is excellent.
The VirusTotal overlay shows any vulnerabilities if an application has vulnerabilities, any CVEs present, or any active CVEs. This allows us to easily patch applications accordingly based on the criticality of the vulnerability. The audit mode or monitoring mode visibility is also very helpful for us, as we can have visibility into application usage and how employees and users are utilizing it.
The direct blocklisting is another feature I can specify. Alongside its core allowlist features, pre-configured blocklists map to the MITRE ATT&CK databases and Microsoft recommended block rules. This proactively neutralizes living-off-the-land attacks where bad actors try to hijack legitimate native system utilities.
For improvements, Airlock Digital Application Control could add patching advice or recommendations to improve the usage of their application. They could specify critical security vulnerabilities they are finding in applications or end-of-life applications. For example, if an application is end of life, that should be identified. Although the VirusTotal overlay exists and VirusTotal provides their own database and repository information, Airlock Digital Application Control could add additional information related to the security aspects of the applications or browser extensions we are using.
I have been using Airlock Digital Application Control for the last year in my organization.
On a scale of one to ten, I would give eight out of ten. I will not give any application a ten out of ten because no application is perfect in nature.
Regarding governance, I can say that we have audit mode and enforcement mode, and governance is completely in compliance. Regarding the security aspect of the application, that is excellent, which includes OTP and for administrators, multi-factor authentication and one-time passwords. The security advice is an area for improvement that I mentioned earlier.
It has been consistent because of the multiple policies that we can add as multi-attribute trust policies. These can be configured based on file hashes, digital publishers, specific file paths, or parent processes, which has been very useful for me. The broad execution coverage is one of the beneficial aspects, covering EXE, MSI, or DLL files, as well as scripts such as PowerShell scripts.
I would recommend trying the free trial which is offered. I experienced Airlock Digital Application Control in the trial, and the satisfaction I received led me to purchase Airlock Digital Application Control from AWS.
