The Application Filtering Parameters
Application filtering allows you to reduce the amount of information received from the Windows Client by defining applications for which data will be skipped during monitoring.
Application filtering can be in performed in one of following three states by selecting the option required in the Filter State drop-down list (on the Editing Client / Editing Client Group page, on the Application Filtering tab in the Application Filtering section):
• Disabled: User activity with all applications is monitored (screen captures are recorded and keystrokes are logged).
• Monitor only activity matching the defined parameters: Only user activity with specified applications is monitored. Information on all other activity is skipped. This mode allows you to enable monitoring of important applications only.
• Monitor all activity except: User activity with all applications except specified ones is monitored. This mode allows you to skip information about user activity in non-suspicious applications (e.g. Microsoft Word).
Applications are identified by name, window title or URL. Parameters are combined with OR logic, i.e. if an activity meets at least one of the conditions, it is recorded in the Monitor only activity matching the defined parameters mode or skipped in the Monitor all activity except mode.
NOT AVAILABLE IN SAAS It is recommended to use application filtering along with the Capture active window only option which is enabled by selecting this checkbox (on the Editing Client / Editing Client Group page, on the User Activity Recording tab, scroll down to the Screen Capture Settings section) to fully prevent sensitive data from being monitored.
Examples of parameters:
.ini File Parameter | Parameter Defined in the Management Tool |
Monitor all data without applying any filters. | |
[FilterParameters] FilterState=disable FilterAppTitle= FilterAppName= | On the Application Filtering tab, in the Application Filtering section, in the Filter State drop-down list, make sure that Disabled is selected. |
Monitor only data from all applications containing the words “Facebook” or “Gmail” in the title. | |
[FilterParameters] FilterState=include FilterAppTitle=Facebook,Gmail FilterAppName= | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor only activity matching the defined parameters. 2. In the Active Window Title or URL Contains field, enter “Facebook;Gmail”. |
Monitor only data from all applications containing the words “Firefox” or “Internet” in the application name. | |
[FilterParameters] FilterState=include FilterAppTitle= FilterAppName=Firefox,Internet | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down list, select Monitor only activity matching the defined parameters. 2. In the Application Name Contains field, enter “Firefox;Internet”. |
Monitor only data from applications containing the words “Firefox”, “Chrome” or “Internet” in the application names (with any title), and from applications containing the word “Facebook” in the title (with any application name). | |
[FilterParameters] FilterState=include FilterAppTitle=Facebook FilterAppName=Firefox,Chrome,Internet | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor only activity matching the defined parameters. 2. In the Application Name Contains field, enter “Firefox;Chrome;Internet”. 3. In the Active Window Title or URL Contains field, enter “Facebook”. |
Monitor all data except data from applications containing the words “work” or “doc” in the title. | |
[FilterParameters] FilterState=exclude FilterAppTitle=work,doc FilterAppName= | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Active Window Title or URL contains field, enter “work;doc”. |
Monitor all data except data from applications containing the words “Word” or “Excel” in the application name. | |
[FilterParameters] FilterState=exclude FilterAppTitle= FilterAppName=word,excel | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Application Name Contains field, enter "Word;Excel”. |
Monitor all data except data from applications containing the word “Word” in the application name, or containing the word “doc” in the title. | |
[FilterParameters] FilterState=exclude FilterAppTitle=doc FilterAppName=word | On the Application Filtering tab, in the Application Filtering section, do the following: 1. In the Filter State drop-down-list, select Monitor all activity except. 2. In the Application Name Contains field, enter “Word”. 3. In the Active Window Title or URL Contains field, enter “doc”. |