This is a basic solution; the policy screen is okay, and it's easy to configure.

The most valuable feature is the whitelisting. I can test the applications and we can also predefine rules for Windows, rules for the application and control. We need to define the application that we need to use ie; the folders, the application resolution we need to allow.

We also like the Change Control. We can control how things get executed. It has signatures for different kinds of protocols.