We use this product for server architecture protection. We have both virtual and physical servers.

It is like a host-based intrusion detection system. It disallows or stops you from installing undesired applications. Irrespective of whether they are malicious or not, it stops these applications from being installed by the end-users and other applications or processes that might try to install them.

We are using this solution to put our servers in lockdown.