Secure Access Service Edge:Manage software

Add a software type

1. Log on to the Secure Access Service Edge (SASE) console.

2. In the navigation pane on the left, choose Terminal Management > Software Management.

3. On the Software Blacklist tab, you can configure a software type.

   1. In the Software Type section, click Add.

   2. In the Add Software Type dialog box, enter a name for the custom software type and click OK.

      The software type name can be 1 to 128 characters long and can contain Chinese characters, letters, digits, hyphens (-), underscores (_), and periods (.). The name must start with a Chinese character, letter, or digit.

      For example, you can set the software type to Instant Messaging.

Create software to be disabled

Choose one of the following methods:

Configure software disabling policies

Click Blacklist Policy Settings, and on the Blacklist Policy Settings page, click Create Policy. In the Create Policy panel, configure the parameters and click OK.

View violation events

You can view the trend chart for Violation Events, the top five Unauthorized Software and their corresponding Violations, and the top five User in Violation and their corresponding Violations.

Other operations

• View details of unauthorized software

  On the Unauthorized Software page, find the software and click Details in the Actions column. In the Details panel, you can view detailed information about the unauthorized software.

• Manage disabled software

  On the Unauthorized Software page, find the software and click Edit in the Actions column to modify its information.

• Delete unauthorized software

  If a piece of software is no longer considered unauthorized, you can click Delete in the Actions column for that software. After the software is deleted, its use is no longer recorded as a violation event.

  Important

  • If a software application is on the unauthorized list but is not blocked, check whether the Process Name is correct in the Details panel.

  • Before you delete a piece of unauthorized software, make sure that no policies apply to it. Otherwise, you cannot delete the software.

Manage software

Go to the Software Library page to perform the following operations:

Manage software versions

Go to the Software Library page, find the target software, and click View in the Actions column. You can then perform the following operations:

• Add a version

  1. In the Version Information section of the Details panel, click Add Version.

  2. In the Add Software Version dialog box, configure the parameters and click OK.

     Parameter	Description
     Operating System	Windows macOS(Apple) macOS(Intel)
     Software Publisher	Local Upload: Click Upload Local File to upload a local installation package. Windows supports .exe and .msi formats. macOS supports .dmg and .pkg formats. Third-party Links: Enter an external download link.
     MD5	Enter the MD5 hash of the installation package to verify its integrity. When you upload a local file, the MD5 hash is automatically generated.
     Software Version Number	Set the specific version number of the software.

• Published Version

  1. Find the target version and turn on the switch in the Status column to publish the version.

  2. After the version is published, you can view and install it in the Software Library of the SASE client (version 5.0 or later) by choosing Settings > Tools.

• Distribution Version

  After you submit a software distribution task, the system automatically sends an installation command to SASE clients that are version 5.0 or later. The client then automatically performs the installation.

  1. Find the target version record and click Deploy in the Actions column. In the panel that appears, enter the required information (see Create a software distribution task) and click OK to create the distribution task.

  2. Go to the Software Distribution page to view the status and results of the software distribution. For more information, see View the status of a software distribution task. To stop the task, see Stop a software distribution task.

• Edit a version

  Find the target version and click Edit in the Actions column to modify the software version information.

• Delete a version

  Find the target version and click Delete in the Actions column to delete the software version.

  Note

  If a Software Distribution task for the software is Running, you cannot delete the software. To delete the software, you must first stop the software distribution task.

Create a Software Distribution task

1. Go to the Software Distribution page and click Software Distribution.

2. In the Software Distribution dialog box, configure the parameters and click OK.

   Parameter	Description
   Task Name	Set a name for the distribution task.
   Distribute Software	Select the software to be distributed from the software library.
   Distribution Time	Deploy Now: The task is executed immediately after it is created. Specify Time: You can specify multiple time periods to execute the distribution task. Once the task is completed, it will not be executed in subsequent time periods. The entire task is executed only once.
   Installation Parameters	Set the installation parameters required for the software installation.
   Effective Scope	The following six scope types are supported: Specific User Group Specific Device Tag Specific Device All Users All Devices
   Validity Period	Valid Days: Set the specific number of valid days (1 to 100). Indefinite: The distribution task is permanently valid.
   Rate Limit	Enable: Set the maximum download speed for the SASE client in KB/s. Disable: Do not limit the download speed.
   Distribution Retry Count	Set the number of automatic retries after a distribution failure (0 to 5).
   Timeout	Set the timeout period for task execution in seconds. The value can be from 0 to 86400.

Stop a Software Distribution task

Go to the Software Distribution page, find the target distribution task, and stop the task using one of the following methods:

• Method 1: In the Actions column, click Stop and follow the on-screen instructions.

• Method 2: In the Actions column, click View. In the panel that appears, click Stop Distribution / Installation and follow the on-screen instructions.

View the status of a Software Distribution task

Go to the Software Distribution page, find the target distribution task, and perform the following operations to view its status and details:

• View distribution status

  View the Status column. The statuses include Pending, Running, and Stopped.

• View execution result distribution

  Hover over the cell in the Task Result column to view the number of tasks in each status: All, Pending, Running, Execution Successful, and Execution Failed.

• View complete information

  In the Actions column, click View. In the panel that appears, you can view the total number of target devices, the distribution of statuses, the distribution of software installation statuses, and the distribution and installation details.

• View execution logs of a terminal device

  In the Actions column, click View. In the panel that appears, find the distribution record for the target device and click View Logs in the Actions column.

• Download detailed records of a distribution task

  In the Actions column, click View. In the panel that appears, click Policy Export Tasks to download the detailed records of the distribution task.

Obtain the full name of a Windows software

The full name of a software program in Windows is a string that uniquely identifies an application. It is a basic property and is unique within the system. You can obtain it in one of the following ways:

• From Software Management in the SASE console: Use this method if the software is already recorded in the SASE console.

• From "Uninstall or change a program" in Windows: Use this method if the software is not displayed in the SASE console.

Find the full English names of Windows software

The full English name of a software program in Windows is a string that uniquely identifies an application. It is a basic property and is unique within the system. You can obtain it as follows:

1. In Windows Settings, find Time & Language.

2. In the Preferred languages section, add English (United Kingdom).

3. Install the English (United Kingdom) language and select Set as my Windows display language.

4. Open Uninstall or change a program in Windows.

5. Find the corresponding software name in the Uninstall or change a program list.

Obtain the Bundle ID of a macOS application

The Bundle ID in macOS is a string that uniquely identifies an application. It is a basic property and is unique within the system. You can obtain it in one of the following ways:

• From Software Management in the SASE console: Use this method if the software is already recorded in the SASE console.

• From the terminal in macOS: Use this method if the software is not displayed in the SASE console.