Application Catalog

the application catalog page is where all the discovered applications are gathered from the agent installed endpoints and application policy groups can be created when a system admin wants to define a policy group, an application can be selected from this discover application list, or its attributes can be input manually agent reports application metadata to kron pam for the enhanced security level of the policies and ease of use the green button located on the right side of the above page allows you to assign discovered applications to application policy groups the same application cannot be assigned multiple times in application policy groups when an agent installed endpoint detects applications installed on the device those applications will start appearing in the discovered applications to observe applications under this menu you need to make a configuration under application discovery which will be mentioned in section agent administration also when the end user clicks an app on the agent install endpoint this application is automatically sent to kron pam without discovering the job needed on the application catalog, if you click on these applications on the right side of the page kron pam will display which endpoints have these applications installed and when you click on the ip address shown kron pam will display the application metadata sent from that specific endpoint as shown in the image above in metadata, we can discover the application name, hash of the application, version of the application, path of the application, signature of the application, source of the application, and vendor of the application this page also informs about the application scores that are coming from virus total integration currently, kron pam applies policies over hash(sha256), application name and application version, certificate, path, publisher, and vendor on the application catalog screen, client and server policies are also separated when creating an application policy group, you can indicate whether the policy is for a client or server client means windows 10 and 11 server means server 2016, 2019, and 2022 when the agent is installed on the endpoint, it recognizes whether the os is the client or server and, hence, receives policies according to os type when a user wants to define a policy, first, an application policy group must be created for this purpose, the user clicks on the add button in the top right corner upon clicking the add button, the user is expected to input a group name and select a policy action under this policy with elevation configuration, when an end user attempts to launch an application included in the policy, a prompt will be triggered requesting the user to set a time limit for its usage the end user has the authority to determine the duration for which this application can be accessed once the elevation request is approved by the end user's manager, a temporary rule is generated specifically for that user this temporary rule remains active until the designated time limit expires upon reaching the expiration time, the temporary rule is automatically removed, revoking the elevated privileges previously granted to the user for that particular application this mechanism ensures that elevated access is granted only for the required period, promoting security and control over privileged application usage