What is the DLP System (or HIPS or Firewall), which allows you to allow traffic only to certain applications?

Question

Information Security

Good afternoon
Task: centrally within the company to allow http traffic only for the Google Chrome process.
So that the process unknown.exe could no longer do this.
(that is, as personal firewalls usually do, but only centrally and for all company users)
What software can help to do this?

Answer 1

I could be wrong, but you probably need something like TMG =)
I.e. in general, I see the solution to this issue through DPI. Do not look at the process, namely inside the package.
And TMG can DPI (well, comrades from Microsoft talked about this more than once at conferences).
There are solutions for implementing DPI on Linux, but either they are outdated (IMHO), or you need to finish it very, very much.

Answer 2

one hundred thousand million times they said that you should not have unknow.exe on your computer. solve the problem from the wrong end

Answer 3

If you're lucky to get Cisco Security Agent, you'll be happy. It knows how not only to cut traffic by ports for applications, but does it up to limiting the circulation of specific packets. And a lot of good and tasty things.
Of the minuses, it was removed from support, but it did not become worse from this.