Summary

The new application deployment investigation capabilities inherent in the CSA 4.5 release are a welcomed addition to the product. Although it is important to protect the endpoints and control known application behavior when desired, it is extremely important to see what is actually installed that might be outside the standard desktop image. These unknown applications can cause a lot of damage.

After you discover the applications through application deployment investigation, it is advantageous to be able to report on how they are used and with whom they communicate from a network perspective through application deployment reports. The next chapter delves into the Application Behavior Analysis feature, which enables you to further understand what the known and unknown applications are doing on your endpoints as they interact with the local system and network peers.