List of recommended client configuration settings
New at Securepoint: 10.2026
notempty
This article refers to a Beta version
-
Access: 
AdminWizard 
Client configuration
AdminWizard Client configuration
Behavior
| Caption | Recommended value | Description |
|---|---|---|
| Standard messages | I.e.: "This program has not been classified as trustworthy and therefore cannot be started. Please contact the IT department if you need the program for work." | Notifications can be defined for individual IP addresses, IP networks, and AD groups, which are displayed when an application is blocked.
Additionally, the following actions can be selected:
The text of the warning that is then displayed can also be individually customized |
| USB Allowlisting | At choice | Determines whether USB devices should not be checked, checked by serial number, or checked by device ID |
| Deactivation password | Should be set for security reasons | Password to temporarily deactivate a single agent |
| Deactivation message | On |
Displays a message on the client device at regular intervals (every 15 minutes) if the agent is deactivated |
| Check DLLs | Check RunDLL | Only RunDLLs are checked |
| Check RAM anomalies | Terminate process upon detection | Checks RAM for anomalies (typical for fileless malware) and terminates the associated processes if they occur |
| Signature verification | On |
Applications are checked for valid signatures. If they contain a valid signature from a manufacturer listed here, the applications can be automatically added to the allowlist |
| Microsoft programs | At choice | Determines whether Microsoft programs should be available even when the agent is offline |
| Check Java | On |
Checks Java applications |
| Hide agent symbol | Off |
The agent symbol is displayed on the client |
| Offline mode | No password check. Everything is allowed for the first 4 weeks after installation, then change | Offline mode can be enabled without a password |
| Performance cache | 900s | Determines how long the agent should keep a hash already allowed by the server in the RAM cache |
| Script allowlisting | On |
All scripts are hashed and checked |
| Block dangerous PowerShell commands | On |
Commands executed outside of scripts in PowerShell are scanned for potentially dangerous code and blocked if detected |
| Block execution of PowerShell command line | On |
powershell.exe is blocked when code is to be executed via command line (with -Command or -EncodedCommand) |
Language | ||
| Language | At choice | Sets the language for all agents |
Installation | ||
| Installation abort | On |
The installation of the Agent for Application Control is aborted if a denied application is found during the installation of the agent |