The Application and Device Control technology within Symantec Endpoint Protection (SEP) is
responsible for blocking unauthorized software behaviors, such as preventing a downloaded program
from installing browser plugins. This feature is designed to enforce policies that restrict specific
actions by applications, which includes controlling program installation behaviors, access to certain
system components, and interactions with browser settings. Application and Device Control
effectively safeguards endpoints by stopping potentially unwanted or malicious modifications to the
browser, thus protecting users from threats that may arise from unverified or harmful plugins.