Client configuration

In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden

• ApplicationControl/AdminWizard (transclusion) (← links)
• ApplicationControl/Grundkonfiguration (← links)
• ApplicationControl/Glossar (← links)
• ApplicationControl/FAQ (← links)

Explanation of all settings in the client configuration and a list of recommended settings

New at Securepoint: 10.2026

notempty

This article refers to a Beta version

-

Access: AdminWizard Client configuration

---

notempty

Exceptions can be created for all settings except the Standard Message.
For these exceptions, the setting can then be defined separately

Behavior

Value	Description	Recommended value
Standard messages Standard messages These notifications are displayed when an application is denied by the Securepoint Appliance
Setting options for a warning	Notifications can be defined for individual IP addresses, IP networks, and AD groups, which are displayed when an application is blocked. Additionally, the following actions can be selected: Deny, shut down client immediately Deny, ask user if it should still be started Deny, display warning Deny without warning The text of the warning that is then displayed can also be individually customized	At choice I.e.: "This program has not been classified as trustworthy and therefore cannot be started. Please contact the IT department if you need the program for work."
USB Allowlisting USB Allowlisting Should USB devices be checked?
Do not check USB devices	No USB devices are checked	At choice
Check USB devices by their serial number	All USB devices are checked by their serial number
Check USB devices by their device ID	All USB devices are checked by their device ID
Deactivation password Deactivation password
••••••••Change	Password to temporarily deactivate a single agent	Should be set for security reasons
Deactivation message Deactivation message
On	Displays a message on the client device at regular intervals (every 15 minutes) if the agent is deactivated	On
Off	No message is displayed on the client device
Check DLLs Check DLLs
Off	No DLLs are checked	Check RunDLL
Check RunDLL	Only RunDLLs are checked
On	All DLLs are checked
Check RAM anomalies Check RAM anomalies
Off	RAM is not checked for anomalies	Terminate process upon detection
Only log upon detection	Checks RAM for anomalies (typical for fileless malware) and logs them if they occur
Terminate process upon detection	Checks RAM for anomalies (typical for fileless malware) and terminates the associated processes if they occur
Signature verification Signature verification
On	Applications are checked for valid signatures. If they contain a valid signature from a manufacturer listed here, the applications can be automatically added to the allowlist	On
Off	Applications are not checked for valid signatures.
Microsoft programs Microsoft programs
On	Allows all Microsoft programs even when the agent is offline	At choice
Off	No Microsoft programs are enabled when offline
Check Java Check Java
On	Checks Java applications	On
Off	Does not check Java applications
Hide agent symbol Hide agent symbol
On	The agent symbol is hidden on the client	Off
Off	The agent symbol is displayed on the client
Offline mode Offline mode
No password check. Everything is allowed	Offline mode can be enabled without a password	No password check. Everything is allowed for the first 4 weeks after installation, then change
Password check	The previously set password is required to activate offline mode
Perform a "Challenge Response" check (length 4)	A challenge-response check is required to activate offline mode. The length can be chosen between 4, 8, 12, and 16
Performance cache Performance cache
900s	Determines how long the agent should keep a hash already allowed by the server in the RAM cache	900s
PowerShell Script allowlisting Script allowlisting
On	All scripts are hashed and checked	On
Off	Scripts are not checked
Block dangerous PowerShell commands Block dangerous PowerShell commands
On	Commands executed outside of scripts in PowerShell are scanned for potentially dangerous code and blocked if detected	On
Off	No commands in PowerShell outside of scripts are checked
Block execution of PowerShell command line Block execution of PowerShell command line
On	powershell.exe is blocked when code is to be executed via command line (with -Command or -EncodedCommand)	On
Off	powershell.exe is not blocked
Language Language Language
German	The Securepoint Agent is displayed in German on the client	At choice
English	The Securepoint Agent is displayed in English on the client
Installation Installation abort Installation abort
On	The installation of the Agent for Application Control is aborted if a denied application is found during the installation of the agent	On
Off	The installation of the Agent for Application Control is not aborted