The Application Filtering Parameters
Application filtering allows you to reduce the amount of information received from the Windows Client by defining applications, active window titles, and URLs for which data will be skipped during monitoring.
Application filtering can be performed in one of following 3 states, by selecting the option required in the Filter State drop-down list (on the Editing Client / Editing Client Group page, on the Application Filtering tab in the Application Filtering section):
• Disabled: User activity with all applications, active window titles, and URLs is monitored (along with screen captures being recorded, and keystrokes being logged).
• Monitor only activity matching the defined parameters: Only user activity with the specified applications, active window titles, and URLs is monitored. Information on all other activity is skipped. This mode allows you to enable monitoring of important applications, active window titles, and URLs only.
• Monitor all activity except: User activity with all applications, active window titles, and URLs, except the specified ones is monitored. This mode allows you to skip information about user activity in non-suspicious applications (e.g. Microsoft Word), active window titles, and URLs.
Applications are identified by name (in the Application name contains field), or by active window title or URL (in the Active window title or URL contains field). Both of these parameters are combined with OR logic, i.e. if an activity meets at least one of the conditions defined, it is recorded in the Monitor only activity matching the defined parameters mode or skipped in the Monitor all activity except mode.
It is recommended to use application filtering along with the Capture active window only user activity recording parameter, which is enabled by selecting this checkbox (on the Editing Client / Editing Client Group page, on the User Activity Recording tab, and scrolling down to the Screen Capture Settings section) to fully prevent sensitive data from being monitored.
Examples of parameters:
.ini File Parameters | Parameters Defined in the Management Tool |
Monitor all data without applying any filters. | |
[FilterParameters] FilterState=disable FilterAppTitle= FilterAppName= | On the Application Filtering tab, in the Application Filtering section, in the Filter State drop-down list, make sure that Disabled is selected. |
Monitor only data from all applications containing the words “Facebook” or “Gmail” in the title. | |
[FilterParameters] FilterState=include FilterAppTitle=Facebook,Gmail FilterAppName= | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor only activity matching the defined parameters. 2. In the Active window title or URL contains field, enter “Facebook;Gmail”. |
Monitor only data from all applications containing the words “Firefox” or “Internet” in the application name. | |
[FilterParameters] FilterState=include FilterAppTitle= FilterAppName=Firefox,Internet | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down list, select Monitor only activity matching the defined parameters. 2. In the Application name contains field, enter “Firefox;Internet”. |
Monitor only data from applications containing the words “Firefox”, “Chrome” or “Internet” in the application names (with any title), and from applications containing the word “Facebook” in the title (with any application name). | |
[FilterParameters] FilterState=include FilterAppTitle=Facebook FilterAppName=Firefox,Chrome,Internet | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor only activity matching the defined parameters. 2. In the Application name contains field, enter “Firefox;Chrome;Internet”. 3. In the Active window title or URL contains field, enter “Facebook”. |
Monitor all data except data from applications containing the words “work” or “doc” in the title. | |
[FilterParameters] FilterState=exclude FilterAppTitle=work,doc FilterAppName= | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Active window title or URL contains field, enter “work;doc”. |
Monitor all data except data from applications containing the words “Word” or “Excel” in the application name. | |
[FilterParameters] FilterState=exclude FilterAppTitle= FilterAppName=word,excel | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Application name contains field, enter "Word;Excel”. |
Monitor all data except data from applications containing the word “Word” in the application name, or containing the word “doc” in the title. | |
[FilterParameters] FilterState=exclude FilterAppTitle=doc FilterAppName=word | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Application name contains field, enter “Word”. 3. In the Active Window Title or URL Contains field, enter “doc”. |