Security policies only deliver value when they are consistently applied and continuously maintained. Many organisations invest time defining strong endpoint standards, yet devices gradually drift from those standards due to user activity, software installations, or malicious interference.

The real challenge isn’t defining security controls — it’s ensuring they remain intact across every endpoint, every day.

Faronics Cloud helps address this challenge by combining persistent policy enforcement, centralised visibility, and automatic correction of configuration changes. The following overview explains how these capabilities contribute to a stronger and more predictable endpoint security posture.

---

Enforced Security That Doesn’t Drift

Traditional endpoint management often relies on initial configuration and periodic audits. Over time, however, systems change. Users adjust settings, malware alters configurations, and inconsistencies emerge.

Faronics Cloud approaches enforcement differently by ensuring devices return to a defined, approved state automatically.

 

Deep Freeze: Guaranteed Baseline Integrity

Deep Freeze preserves a system’s approved configuration by restoring it on every reboot. Rather than simply applying settings, it ensures those settings remain intact.

Key benefits include:

• Security configurations remain unchanged (firewall rules, antivirus settings, UAC controls, etc.).
• Malware-related changes are removed after restart.
• Unauthorised applications disappear upon reboot.
• Configuration consistency is maintained without constant auditing.

Instead of chasing configuration drift, IT teams maintain a known baseline that is reliably restored.

---

Anti-Executable: Default-Deny Application Control

Anti-Executable uses a whitelist-based model, allowing only approved software to run.

• Unrecognised programs are blocked outright.
• Malware cannot execute if it is not explicitly authorised.
• Installation attempts outside the approved list are ineffective.
• The delivery method of malicious code becomes irrelevant if execution is denied.

This approach reduces reliance on detection signatures alone and limits risk at the execution stage.

---

WINSelect: Controlled User Environments

WINSelect restricts access to system tools and settings at the interface level.

• Sensitive areas such as system utilities or configuration panels can be removed from view.
• Storage access can be limited according to policy.
• Devices can be locked down into tightly controlled kiosk-style environments.

By reducing available system access points, organisations minimise opportunities for misuse or compromise.

---

Centralised Policy Control

All enforcement features are managed from a single cloud-based console.

Administrators can:

• Define policies once and apply them to device groups
• Roll out updates automatically
• Maintain consistent configurations across locations
• Eliminate inconsistent, device-by-device setup

Centralised management reduces gaps in enforcement and simplifies oversight.

---

Visibility Across the Entire Endpoint Fleet

Security also depends on awareness. Faronics Cloud provides real-time insight into device status and protection levels.

 

Real-Time Monitoring

From the console, administrators can quickly review:

• Whether Deep Freeze is active or in maintenance mode
• If application control is enabled
• Current enforcement status of restrictions
• Device check-in history and connectivity

This visibility helps teams quickly identify systems that require attention.

---

Fleet-Level Overview

Aggregated dashboards allow organisations to assess their overall posture, including:

• Percentage of protected devices
• Compliance trends across device groups
• Recent activity and reporting status
• Potential systemic issues

Instead of reviewing endpoints individually, administrators gain a clear operational snapshot.

---

Supporting Compliance and Governance

For organisations operating under regulatory or policy frameworks, Faronics Cloud provides structured enforcement that supports:

• Endpoint hardening and configuration management
• Software control and application restriction policies
• Access limitation requirements
• Patch and update scheduling documentation
• Audit readiness through demonstrable technical controls

Because configurations are enforced rather than advisory, organisations can demonstrate consistent application of security controls.

---

Automatic Remediation of Misconfiguration

Misconfigured devices frequently create security gaps — whether due to user actions, malware interference, or administrative error.

Deep Freeze addresses this by making configuration changes temporary unless deliberately applied during maintenance windows.

What Happens When a Device Changes?

• Security tools disabled → Restored at reboot
• Firewall rules altered → Restored at reboot
• Unapproved software installed → Removed at reboot
• Settings modified accidentally → Restored at reboot

The correction process does not rely on detection or manual intervention. The approved baseline simply returns automatically.

---

Reduced Attack Surface

Beyond restoring systems, Faronics Cloud reduces exposure in the first place:

• Fewer executable files permitted to run
• Limited access to sensitive system utilities
• Controlled storage and write permissions

A smaller attack surface means fewer opportunities for successful exploitation. When combined with automatic restoration, it significantly increases resilience.

---

Security Through Consistency and Control

Faronics Cloud enhances endpoint protection by ensuring that:

• Policies are enforced continuously
• Devices remain in a known-good state
• Configuration drift is automatically corrected
• Protection status is visible across the entire fleet

For shared environments such as classrooms, labs, libraries, kiosks, and public-access systems, this model significantly strengthens security by making persistent compromise difficult to achieve.

---

Get Started

Interested in evaluating Faronics Cloud? Contact our team to learn more: www.logon-int.com/contact

Remote Machine Management with Faronics Cloud

Faronics offers a unified endpoint management solution, to take care of your helpdesk as well as solving your other significant problems.

Get started with Faronics Solutions

Contact us today to discover how Faronics software helps manage, simplify, and secure multi-user computing environments