Application groups

All security profiles are applied towards the application groups. The application group must include at least one process - application.

You can define the applications within the application group by absolute or relative paths. The relative path is used only when you define UNRESOLVED configuration database using the Configuration Editor. In all other cases the applications should be defined using absolute paths.

One application may be a member of several groups simultaneously. The rules are applied in the order defined. If there is an application activity it would be processed through defined application groups from top to bottom.

One application group may have multiple profiles assigned. In general the rules in upper profile take precedence over the rules in a lower profile.