{"id":8579,"date":"2025-07-11T07:48:43","date_gmt":"2025-07-11T12:48:43","guid":{"rendered":"https:\/\/lg-staging.lougcloud.com\/?p=8579"},"modified":"2026-02-10T16:23:32","modified_gmt":"2026-02-10T21:23:32","slug":"blocking-remote-access-tools-sophos-application-control","status":"publish","type":"post","link":"https:\/\/lg-staging.lougcloud.com\/?p=8579","title":{"rendered":"Blocking Remote Access Tools with Sophos Application Control"},"content":{"rendered":"\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-85bp3-f856194ef33e7bc72ec0d3bf98278fce\">\n.flex_column.av-85bp3-f856194ef33e7bc72ec0d3bf98278fce{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-85bp3-f856194ef33e7bc72ec0d3bf98278fce av_one_full  avia-builder-el-0  el_before_av_section  avia-builder-el-no-sibling  first flex_column_div av-zero-column-padding  '     ><p><br \/>\n<section  class='av_textblock_section av-k0pon615-92ea21455f84089b14b66129c69212c2 '  ><div class='avia_textblock' ><h1>Blocking Remote Access Tools with Sophos Application Control<\/h1>\n<\/div><\/section><br \/>\n<section  class='av_textblock_section av-k0pop9td-399c35357da9cf26107da9a57de824c5 '  ><div class='avia_textblock' ><p>Remote access tools are essential for many IT functions, but they can also be exploited by cybercriminals as stealthy entry points into your network. At Louisville Geek, we recently launched an initiative to harden client environments by blocking remote access tools that aren\u2019t in use, using <a href=\"https:\/\/lg-staging.lougcloud.com\/it-services\/enterprise-it-services\/vendor-relationship-management\/sophos\/\">Sophos Endpoint&#8217;s Application Control<\/a> feature.<\/p>\n<p>Tools like Atera, SimpleHelp, and AnyDesk are often used by threat actors during <a href=\"https:\/\/lg-staging.lougcloud.com\/it-services\/it-security-solutions\/advanced-threat-monitoring\/#ransomware-prevention\">ransomware campaigns<\/a> to move laterally, maintain persistence, and avoid detection. This project is part of our commitment to building a smarter, more resilient cybersecurity ecosystem for our clients.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8585\" src=\"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg\" alt=\"Illustration of a remote access ribbon over a laptop representing endpoint security and application control\" width=\"1200\" height=\"628\" srcset=\"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg 1200w, https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration-300x157.jpg 300w, https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration-1030x539.jpg 1030w, https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration-768x402.jpg 768w, https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration-705x369.jpg 705w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2>Why Remote Management Tools Are a Security Concern<\/h2>\n<p>Threat actors commonly leverage legitimate Remote Monitoring and Management (RMM) tools to mimic IT administrators and take control of compromised systems. These tools are widely available and difficult to detect in use, making them ideal for attackers who want to blend in with legitimate IT activity.<\/p>\n<p>In response, we reviewed all Sophos-deployed environments with licensing that supports Application Control and took action to disable the use of unauthorized RMM software.<\/p>\n<h3>How Louisville Geek Implemented the Change<\/h3>\n<p>We started by auditing each client\u2019s environment to determine which remote access tools were actually in use for business purposes. If none were present, we created and applied a policy to block the use of tools like Atera, SimpleHelp, TeamViewer, and AnyDesk.<\/p>\n<p>If a client needed access to a remote tool for a specific vendor, we created device-specific exclusions that automatically expire after a set period. Permanent exclusions were only applied after validation of a long-term business need.<\/p>\n<blockquote>\n<p>To learn more about our layered defense strategies, visit our <a href=\"https:\/\/lg-staging.lougcloud.com\/it-services\/it-security-solutions\/network-security\/\">Network Security<\/a> page and see how we protect your systems at every level.<\/p>\n<\/blockquote>\n<h3>Benefits of Application Control in Sophos Endpoint<\/h3>\n<p>Sophos Endpoint&#8217;s Application Control is a powerful but often underutilized feature. By deploying it strategically, we can:<\/p>\n<ul>\n<li>Reduce the attack surface area<\/li>\n<li>Prevent lateral movement during an attack<\/li>\n<li>Limit attacker persistence<\/li>\n<li>Enhance visibility and control over third-party tools<\/li>\n<\/ul>\n<p>This initiative also ensures that your endpoint security investment is working at full potential.<\/p>\n<h2>Smarter Security, Backed by Strategy<\/h2>\n<p>At Louisville Geek, <a href=\"https:\/\/lg-staging.lougcloud.com\/it-services\/it-security-solutions\/\">security<\/a> isn\u2019t just about reacting to alerts. It involves making informed, strategic decisions to prevent threats from escalating. By disabling unused and risky RMM tools, we are proactively reducing our clients\u2019 exposure to ransomware and advanced threats.<\/p>\n<h3>Ready to Strengthen Your Network Security?<\/h3>\n<p>The difference between compromise and containment often comes down to proper configuration and ongoing oversight. At Louisville Geek, we act as an extension of your team, ensuring your tools are not only deployed but strategically tuned to defend against common threats.<\/p>\n<p>If you&#8217;re unsure whether unused RMM tools are creating vulnerabilities in your environment, now is the time to take action. Let our experts audit your configuration, identify exposure points, and deploy Sophos Application Control to proactively secure your network.<\/p>\n<p><a href=\"https:\/\/lg-staging.lougcloud.com\/contact-us\/\">Contact us today to schedule a consultation<\/a> and discover how we can help build a more resilient <a href=\"https:\/\/lg-staging.lougcloud.com\/news\/why-cybersecurity-ecosystem-matters-integrated-security-tools\/\">cybersecurity ecosystem<\/a> for your business.<\/p>\n<h3>About Louisville Geek<\/h3>\n<p>Louisville Geek helps organizations protect their operations with a structured, outcomes based approach to cybersecurity. We focus on reducing risk, improving resilience, and strengthening daily operations. These efforts are supported by mature <a href=\"https:\/\/lg-staging.lougcloud.com\/it-services\/it-security-solutions\/\">IT security solutions<\/a> designed to safeguard sensitive data and maintain stability.<\/p>\n<\/div><\/section><\/p><\/div><\/div><\/div><\/div><!-- close content main div --><\/div><\/div><div id='newsletter-cta'  class='avia-section av-ar2xur-a98b2973a9aea5a95ad2dd03820eceed main_color avia-section-default avia-no-border-styling  avia-builder-el-4  el_after_av_one_full  avia-builder-el-last  avia-bg-style-scroll container_wrap fullsize'  ><div class='container av-section-cont-open' ><div class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-8579'><div class='entry-content-wrapper clearfix'>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-972h9f-3c7fc399802012db568bdb195468184a\">\n.flex_column.av-972h9f-3c7fc399802012db568bdb195468184a{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-972h9f-3c7fc399802012db568bdb195468184a av_one_half  avia-builder-el-5  el_before_av_one_half  avia-builder-el-first  first flex_column_div av-zero-column-padding  '     ><section  class='av_textblock_section av-7qj6ub-73632969eb97848fa341974caf417e21 '  ><div class='avia_textblock' ><p>Get expert IT tips, industry insights, and updates on the latest managed IT solutions for your business. Stay ahead of the competition and ensure your IT systems are optimized with Louisville Geek&#8217;s trusted services.<\/p>\n<\/div><\/section><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-5szbyb-8b3269089a48c0b62fa218ef9c29cc9f\">\n.flex_column.av-5szbyb-8b3269089a48c0b62fa218ef9c29cc9f{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-5szbyb-8b3269089a48c0b62fa218ef9c29cc9f av_one_half  avia-builder-el-7  el_after_av_one_half  avia-builder-el-last  flex_column_div av-zero-column-padding  '     ><section  class='av_textblock_section av-4bxto3-bc2dd4a88d48ae257e248a3cd6b374e6 '  ><div class='avia_textblock' ><h3>Stay updated by signing up for our newsletter<\/h3>\n<\/div><\/section><br \/>\n<\/p><\/div>\n<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Remote access tools can create hidden vulnerabilities when left unmanaged. Learn how strategic use of Sophos Application Control helps block unused tools and reduce risk.<\/p>\n","protected":false},"author":1,"featured_media":8585,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-8579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Blocking Remote Access Tools with Sophos | Strengthen Endpoint Security<\/title>\n<meta name=\"description\" content=\"Learn how blocking unused remote access tools with Sophos Application Control reduces cyber risk, prevents lateral movement, and strengthens endpoint security.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Blocking Remote Access Tools with Sophos | Strengthen Endpoint Security\" \/>\n<meta property=\"og:description\" content=\"Learn how blocking unused remote access tools with Sophos Application Control reduces cyber risk, prevents lateral movement, and strengthens endpoint security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/lg-staging.lougcloud.com\/?p=8579\" \/>\n<meta property=\"og:site_name\" content=\"Louisville Geek\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-11T12:48:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-10T21:23:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"lg_admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"lg_admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Blocking Remote Access Tools with Sophos | Strengthen Endpoint Security","description":"Learn how blocking unused remote access tools with Sophos Application Control reduces cyber risk, prevents lateral movement, and strengthens endpoint security.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Blocking Remote Access Tools with Sophos | Strengthen Endpoint Security","og_description":"Learn how blocking unused remote access tools with Sophos Application Control reduces cyber risk, prevents lateral movement, and strengthens endpoint security.","og_url":"https:\/\/lg-staging.lougcloud.com\/?p=8579","og_site_name":"Louisville Geek","article_published_time":"2025-07-11T12:48:43+00:00","article_modified_time":"2026-02-10T21:23:32+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg","type":"image\/jpeg"}],"author":"lg_admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"lg_admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#article","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579"},"author":{"name":"lg_admin","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/3be0d57bc8c8a3746bb75ce4d733211c"},"headline":"Blocking Remote Access Tools with Sophos Application Control","datePublished":"2025-07-11T12:48:43+00:00","dateModified":"2026-02-10T21:23:32+00:00","mainEntityOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579"},"wordCount":1301,"publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579","url":"https:\/\/lg-staging.lougcloud.com\/?p=8579","name":"Blocking Remote Access Tools with Sophos | Strengthen Endpoint Security","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#primaryimage"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg","datePublished":"2025-07-11T12:48:43+00:00","dateModified":"2026-02-10T21:23:32+00:00","description":"Learn how blocking unused remote access tools with Sophos Application Control reduces cyber risk, prevents lateral movement, and strengthens endpoint security.","breadcrumb":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/lg-staging.lougcloud.com\/?p=8579"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#primaryimage","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2025\/07\/remote-access-ribbon-laptop-cybersecurity-illustration.jpg","width":1200,"height":628,"caption":"Illustration of a remote access ribbon over a laptop representing endpoint security and application control"},{"@type":"BreadcrumbList","@id":"https:\/\/lg-staging.lougcloud.com\/?p=8579#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/lg-staging.lougcloud.com\/"},{"@type":"ListItem","position":2,"name":"Blocking Remote Access Tools with Sophos Application Control"}]},{"@type":"WebSite","@id":"https:\/\/lg-staging.lougcloud.com\/#website","url":"https:\/\/lg-staging.lougcloud.com\/","name":"Louisville Geek","description":"Empowering Local Businesses and National Enterprises with Comprehensive IT Services","publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/lg-staging.lougcloud.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/lg-staging.lougcloud.com\/#organization","name":"Louisville Geek","url":"https:\/\/lg-staging.lougcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","width":1671,"height":506,"caption":"Louisville Geek"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/3be0d57bc8c8a3746bb75ce4d733211c","name":"lg_admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/6e9e6411eb9b94c27ad6dcf6eeea2a67959e86f4aa3ee1cc1b61e042286e2d35?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6e9e6411eb9b94c27ad6dcf6eeea2a67959e86f4aa3ee1cc1b61e042286e2d35?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6e9e6411eb9b94c27ad6dcf6eeea2a67959e86f4aa3ee1cc1b61e042286e2d35?s=96&d=mm&r=g","caption":"lg_admin"},"url":"https:\/\/lg-staging.lougcloud.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/8579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8579"}],"version-history":[{"count":5,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/8579\/revisions"}],"predecessor-version":[{"id":9850,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/8579\/revisions\/9850"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/media\/8585"}],"wp:attachment":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}