AdminWizard

In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden

• ApplicationControl (← links)

The AdminWizard serves as the central management interface for Application Control, through which the appliances are connected and all clients are managed

New at Securepoint: 10.2026

notempty

This article refers to a Beta version

-

Access: AdminWizard  

---

Dashboard Dashboard
Alerts 24 hours
The values below apply to the selected time period
Caption	Value	Description	Datei:SAC 3.0 Dashboardrd-en.png AdminWizard dashboard
Total	0	Total number of alerts
Denied	0	Number of denied applications
Allowed	0	Number of allowed applications
Allowlist 30 Days
The values below apply to the selected time period
Total operations	10036	Total number of operations executed
Added from TLDB and by signature	0	Number of hashes added to the local allowlist via TLDB or by signatures
Added via other procedures	6397	Number of hashes that were not added to the local allowlist via TLDB or signature
Changes	3639	Number of changes to hashes in the local allowlist
TrustLevel Database
TrustLevel less than 4	149	Number of hashes which have a TrustLevel smaller than the minimal TrustLevel
TLDB status	Activated	Status of the TLDB
TrustLevel threshold	4	Defines the TrustLevel which hashes atleast need to be accepted
TLDB adds	0	Number of hashes adopted from the TLDB
Information Learning sources
Learn modes	0	Number of learning modes
Learning user	Nicht gesetzt	Shows the learning users for whom all applications are directly added to the allowlist New learning users can be selected directly from the AD
Trusted signatures	0	If applications contain a signature listed here as trustworthy, they are automatically added to the allowlist
Database
Allowlist total	29716	Total number of entries in the local allowlist
Client deployment
Not secured	-	Number of unsecured clients
Versions
Securepoint Appliance	5.0.0	Version of the currently connected Application Control Appliance. Updates can be checked using the rotating arrows
AdminWizard	3.0.0.0	Version of the AdminWizard. Updates can be checked using the rotating arrows
Agent	3.0.0	Version of the installed agent
Uninstaller	3.0.0	Version of the uninstaller
ClientMgmt	4.0.17.0	Version of the client management
License information
Customer ID	1234567	Customer ID of the AdminWizard license
Connected Appliance	203.0.113.203	IP address of the currently connected Application Control Appliance
Securepoint Appliances	1 / 2	Number of Application Control Appliances if multiple are operated in a cluster
Client licenses	2 / 10000	Number of used client licenses

Log

The Standard Logs are synchronized via a database across all Application Control Appliances. There are a maximum of 1000 entries in the database, and each entry remains for a maximum of 72 hours. If there are new entries for the same hash, only the timestamp and computer name are updated. Debug Logs (selectable via the bug symbol) only relate to the Application Control Appliance to which the AdminWizard is currently connected. They are individual for each Application Control Appliance.
Caption	Value	Description	Debug Logs in AdminWizard
Timestamp	03.19.2026 11:29:43	Timestamp of the log entry
Log Level	5 - Info	Type of log entry. The higher the number, the more detailed.
IP	203.0.113.203	IP address of the client that triggered the log entry
Host	SWC01	Device on which the agent is running that triggered the log entry
User	SYSTEM	User of the client that triggered the log entry
Name	setup.exe	Application to which the log entry refers
Path	C:\Program Files\rempl	Path of the application that triggered the log entry
Hash	2d97e61...	Hash value of the application that triggered the log entry
Action	ALLOW Learning in Learnmode	Action of the log entry
Appliance IP	203.0.113.0	IP address of the Application Control Appliance to which the client is connected

Allowlist

All elements of the local allowlist can be displayed here, broken down by various categories
Caption	Value	Description	Allowlist categories
Allowlist	Name	Sorted by name
	Path	Sorts all entries by their paths
	TrustLevel	Sorted by TrustLevel of the entries. Only TrustLevels greater than or equal to the minimum TrustLevel are displayed. Example TrustLevel
	Class	Sorts the entries by their classification
	Devices	Sorts the entries by the corresponding devices
	Exceptions	Shows all exceptions

Search

Allows searching all entries by different categories
Caption	Value	Description	Search in AdminWizard
Search	Name	Shows all entries in the database where the search parameter appears in the name
	Path	Shows all entries with the searched path
	Class	Shows all entries of the corresponding class
	Hash	Shows all hashes that match the search
	Message	Shows all corresponding messages

Learning sources

Caption	Value	Description	Learning sources in AdminWizard
Learn modes	Shows all configured learning modes
	Learn from	Specifies from which user, host, or IP learning should take place
	Class	Classification of applications learned in this period via the learning mode
	Expires	Indicates whether the learning mode is expiring
	Expiration date	Expiration date of the learning mode
	Add	For a new learning mode, it is selected from whom learning should take place. The selection can be made via: Any client IP addresses or subnets The AD Additionally, the corresponding class of the learned programs is set, and the expiration date of the learning mode is configured. Adding a new learning mode
Learning user	Shows the learning users for whom all applications are directly added to the allowlist New learning users can be selected directly from the AD
TrustLevel Service (TLDB)		If activated, new applications are checked to see if they are stored in the TLDB and then automatically added to the local allowlist, provided the assigned TrustLevel is equal to or greater than the minimum TrustLevel.
	0Minimum TrustLevel: 410	The minimum TrustLevel can be selected via the slider
	Add exceptions	Programs that should not be transferred to the TLDB during the learning process can be entered here Exceptions in the TLDB
Trusted signatures	If applications contain a signature listed here as trustworthy, they are automatically added to the allowlist
Copy existing rule actions		If activated, rules are adopted if an application with the same name and path already exists

Import sources

Caption	Description	Import sources in AdminWizard
Import this computer as a template computer	The computer should only contain trustworthy software, as all applications are added to the allowlist
Import from directory	Multiple applications can be uploaded here in a folder and added to the allowlist
Add	Using the Add buttons, a dialog is opened Importing this computer . This dialog differs between the two variants in one aspect: When importing the computer on which the AdminWizard is currently running, all files are scanned, whereas when importing from a directory, only one directory can be specified whose files are to be imported. For both methods, the following settings are available: Include subdirectories: All subdirectories of the selected directory are also imported Include DLLs: DLLs are also imported Unpack files: Files are unpacked to be imported Include packed files: Packed files are automatically imported The class in which the imported files should be stored, as well as the TrustLevel to be assigned to them, can also be selected.

Client configuration

In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden

• ApplicationControl (← links)

notempty

Exceptions can be created for all settings except the Standard Message.
For these exceptions, the setting can then be defined separately

Behavior

Value	Description	Recommended value
Standard messages Standard messages These notifications are displayed when an application is denied by the Securepoint Appliance
Setting options for a warning	Notifications can be defined for individual IP addresses, IP networks, and AD groups, which are displayed when an application is blocked. Additionally, the following actions can be selected: Deny, shut down client immediately Deny, ask user if it should still be started Deny, display warning Deny without warning The text of the warning that is then displayed can also be individually customized	At choice I.e.: "This program has not been classified as trustworthy and therefore cannot be started. Please contact the IT department if you need the program for work."
USB Allowlisting USB Allowlisting Should USB devices be checked?
Do not check USB devices	No USB devices are checked	At choice
Check USB devices by their serial number	All USB devices are checked by their serial number
Check USB devices by their device ID	All USB devices are checked by their device ID
Deactivation password Deactivation password
••••••••Change	Password to temporarily deactivate a single agent	Should be set for security reasons
Deactivation message Deactivation message
On	Displays a message on the client device at regular intervals (every 15 minutes) if the agent is deactivated	On
Off	No message is displayed on the client device
Check DLLs Check DLLs
Off	No DLLs are checked	Check RunDLL
Check RunDLL	Only RunDLLs are checked
On	All DLLs are checked
Check RAM anomalies Check RAM anomalies
Off	RAM is not checked for anomalies	Terminate process upon detection
Only log upon detection	Checks RAM for anomalies (typical for fileless malware) and logs them if they occur
Terminate process upon detection	Checks RAM for anomalies (typical for fileless malware) and terminates the associated processes if they occur
Signature verification Signature verification
On	Applications are checked for valid signatures. If they contain a valid signature from a manufacturer listed here, the applications can be automatically added to the allowlist	On
Off	Applications are not checked for valid signatures.
Microsoft programs Microsoft programs
On	Allows all Microsoft programs even when the agent is offline	At choice
Off	No Microsoft programs are enabled when offline
Check Java Check Java
On	Checks Java applications	On
Off	Does not check Java applications
Hide agent symbol Hide agent symbol
On	The agent symbol is hidden on the client	Off
Off	The agent symbol is displayed on the client
Offline mode Offline mode
No password check. Everything is allowed	Offline mode can be enabled without a password	No password check. Everything is allowed for the first 4 weeks after installation, then change
Password check	The previously set password is required to activate offline mode
Perform a "Challenge Response" check (length 4)	A challenge-response check is required to activate offline mode. The length can be chosen between 4, 8, 12, and 16
Performance cache Performance cache
900s	Determines how long the agent should keep a hash already allowed by the server in the RAM cache	900s
PowerShell Script allowlisting Script allowlisting
On	All scripts are hashed and checked	On
Off	Scripts are not checked
Block dangerous PowerShell commands Block dangerous PowerShell commands
On	Commands executed outside of scripts in PowerShell are scanned for potentially dangerous code and blocked if detected	On
Off	No commands in PowerShell outside of scripts are checked
Block execution of PowerShell command line Block execution of PowerShell command line
On	powershell.exe is blocked when code is to be executed via command line (with -Command or -EncodedCommand)	On
Off	powershell.exe is not blocked
Language Language Language
German	The Securepoint Agent is displayed in German on the client	At choice
English	The Securepoint Agent is displayed in English on the client
Installation Installation abort Installation abort
On	The installation of the Agent for Application Control is aborted if a denied application is found during the installation of the agent	On
Off	The installation of the Agent for Application Control is not aborted

Securepoint Appliance

Caption	Value	Description	Securepoint Appliance settings
Securepoint Appliance	Restart	Restarts the connected Application Control Appliance
	Shut down	Shuts down the connected Application Control Appliance
	Update	Updates the software of the connected Application Control Appliance
IP configuration of the appliance(s)	Configuration	Allows the configuration of multiple connected Application Control Appliances Configuration of connected Application Control Appliances After selecting an appliance, the following settings can be changed for it Settings of the selected appliance IP address Subnet mask Gateway DNS Syslog NTP NAT IP, if the appliance is behind a NAT router and is only reachable for other appliances via this NAT IP
Log level setting	Everyone 5 - Info	Determines the minimum log level that debug logs on the Application Control Appliance must have to be captured. The higher the value, the more detailed the logs.
	Define exception	A single IP or a subnet of an IP address can be declared as an exception, to which other log levels can be assigned. Adding an exception for the log level If the log level "Debug" is to be selected for a device, this is only possible via an exception.
Login password	••••••••••••Change	Allows changing the currently set password for the Application Control Appliance

Automation

If an automation is to be created, the password of the associated appliance must be stored encrypted, as the automation must be able to log in to the appliance, for example, to create backups of the allowlist. In the second dialog, the login details of the Windows user who is to execute the automation must be entered. Using the Create button, an automation is set up and the following view is displayed.			Confirmation dialog for saving the password Entering the login credentials of the appliance
Caption	Value	Description	Automation settings options
Repetition	Repetition every 1 Days at: 01.13.00	Sets the interval in days at which the automation is executed. The exact time at which the automation should be performed can also be set to the second.
Edit automation	Remove automation	The button removes the current automation notempty There is no confirmation dialog
	Create new automation	The automation runs as a task in the task scheduler. If it is no longer present there, the automation can be added again using this button.
Automation logs	On	Activates or deactivates the logs of the automation
	Path C:\ProgramData\Securepoint\...	Path where the logs should be stored
	Log level Info	The log level describes the verbosity of the logs. The higher the level, the more detailed the logs. The levels are: Off Fatal Error Warn Info Debug Trace
Backup	Start On	A backup is created at the start of the automation
	End On	A backup is created at the end of the automation
	C:\ProgramData\Securepoint\...	Storage location of the created backups
	Number of backups to retain 1	Sets the number of backups to retain. If the number is reached, the oldest backup is overwritten.
Clean up allowlist	On	Deletes all hashes from the allowlist that have not been used for longer than the specified period. This is done once and does not change the setting configured in automation
	Not used since 180 Days	Sets the period that must pass before a hash is considered unused and removed from the database. 180 days are recommended.
Active Directory replication	On	Automatically transfers all changes to groups, computers, and users from Active Directory
Directory import	Add directory	Any software from the selected directories is automatically added to the allowlist when the automation is running

Client Management

Secured, unsecured, and ignored clients are listed separately from each other

Caption	Value	Description	Client Management
Host	SWC01	Name of the client
IP	203.0.113.203	IP address of the client
Agent Version	2.0.111	Agent version of the client
Last login	07.03.2026 03:38:16	Last login of the client
Processor	x64	Processor of the client
Windows Version	10.0.10240	Windows version of the client
Action	Update	Performs an update of the agent on the selected client
	Uninstall	Uninstalls the agent on the selected client
	Reinstall	Reinstalls the agent on the selected client

Settings

Caption	Value	Description	AdminWizard settings
Language	German	Sets the language for all agents
Log Level	Error	Log level of the AdminWizard, determines what is logged and what is not
Keyboard control	Esc	Here, the key assignment for activating keyboard control in the AdminWizard can be configured. With keyboard control, all controls can be activated, or context menus can be opened while holding the Shift key.
Update check	Daily	Sets the time interval at which the AdminWizard checks for updates
	Check for updates now	Immediately checks for any available updates for the AdminWizard
Rule display	Display DLLs	Shows DLLs if activated
	Display WSUS Hashes	Shows WSUS if activated
Advanced settings
Behavior when deleting objects	Show hashes without action	Hashes for which no action is defined are still displayed
	Completely remove object from the allowlist (Note the warning!)	Object is completely removed from the allowlist notempty With TLDB Service activated, deleted hashes may be added back to the allowlist. To prevent this, the applications should be added as exceptions to the TLDB blocklist
	Remove all actions of an object, keep the object (Recommended)	All actions of the object are removed, but the object itself remains (Recommended). This prevents it from being added back to the TLDB, which would require it to be removed again.
Define access restrictions	A group can be selected from the AD, and it can be defined which views of the AdminWizard members of the group are allowed to access. Unmarked views are not visible to this group. If no group is selected, there are no restrictions, and access is allowed for all views. Expand views Collapse views Klicken für dauerhafte Anzeige Selection of allowed views for a group
Advanced signature verification	On	With advanced signature verification, the fingerprint of a signed file is compared with the fingerprint of the associated code-signing certificate from the TLDB. If the fingerprints do not match, the execution of the file is prevented. Unsigned files are not checked or blocked by this function, as they do not have a fingerprint. This verification ensures higher security, as the integrity check of signed files is fully performed.

Ribbon

File‍
Caption	Description
Restore backup	An existing backup can be restored here to adopt the settings contained therein into this AdminWizard
Create backup	The current settings of the AdminWizard are exported as a .slf file
Exit	Exits the AdminWizard
Extras‍
Update Active Directory objects	Updates the Active Directory objects stored in the AdminWizard
TLDB query	Performs a TLDB query and updates the local version of the TLDB
Clean up allowlist	Deletes all hashes from the allowlist that have not been used for longer than the specified period. This is done once and does not change the setting configured in automation
Challenge-Response	The Challenge-Response method allows exceptions to be granted for programs on agents without internet access. A challenge is displayed on the agent, and a response must be entered. The challenge must be communicated to the administrator, who can then enter it in the AdminWizard and generate a response. The administrator can also choose whether the response should be valid only for the program or for a specific period. On the agent, the generated response can be entered to add the blocked program as an exception to the allowlist and allow it to run
Help‍
Show release notes	Links to the changelogs of the AdminWizard, the Agent, and the Appliance
Check for new version	Checks if there is a newer version of the AdminWizard
Setup assistant	Opens the setup assistant
Show licenses	Displays the licenses of all used third-party products
Support	Links to the IT ticket instructions and the FAQ
About	Displays information about the AdminWizard such as Name Version Manufacturer Copyright information