The latest threat in the online landscape – PUAs (Potentially Unwanted Applications) 

 

 

PUA is a term used to describe an application that, while not malicious, is generally considered unsuitable for business networks. Free software always comes with a catch. Examples of these inconveniences include browser extensions or other software that gets installed automatically. Certain applications that can fall into the PUA category might be considered useful by some users. However most of the time these installations are neither requested nor solicited by the user. Here is some advice on how to deal with PUAs.

 

• Detection and removal of PUAs should be configured with the anti-virus software you have chosen to protect your network with.

 

• If you have not previously scanned your computers for PUAs and then removed them, it is very likely that you will find PUAs on your network. In some cases, a large number of these applications may be installed.

 

• Deploying scanning in stages will allow you to more easily deal with any PUAs detected.

 

• Only enable on-access scanning for PUAs as the final step of a phased deployment.

 

• To complete the removal of an unwanted PUA, users may need to restart their computers.

 

• You must familiarize yourself with your organization’s policy regarding PUAs and whether it is acceptable for some of these applications to be running on users’ computers.

 

• If your organisation allows some PUAs to be on the network, you will need to configure your policies so that the specified PUAs are ‘authorized’. This means that they are excluded from scanning and cleanup.

 

• If your organisation does not allow these applications, you can regularly scan and clean your network without the need to authorise any of these PUAs.

 

A PUA policy needs to be created and implemented to ensure that your network is kept clear and functioning properly. Setting up your network carefully and managing company policies correctly will allow you to customise PUA scanning and cleanups to suit the requirements of a variety of users on your network.