Launch Guard
Launch Guard reduces cases where the wrong app is opened under the wrong network scene.
How It Works
When you open a guarded app, NetScene checks the current network rule.
If the current rule matches a Launch Guard configuration, NetScene shows a confirmation prompt.
You can choose:
- Continue launching
- Cancel launching
When launch is canceled, NetScene normally requests the app to quit. If force kill is enabled for that guard, it ends the process directly.
Apps Suitable for Guarding
Common apps suitable for Launch Guard:
- Production database clients
- Internal admin clients
- Remote desktop tools
- Proxy or VPN clients
- Debugging tools that should only be used at a client site
Examples
Production Protection
Rule: Home network
Guarded apps:
- Database client
- Production operations tools
Prompt:
You are not on the production network. Are you sure you want to launch this app?Client-Site Protection
Rule: Client site
Guarded apps:
- Personal proxy client
- Sync drive
- Downloader
This helps reduce the risk of network issues, wrong connections, or unintended transfers on site.
Recommendations
Launch Guard is not a security sandbox or permission system. It is an explicit confirmation layer that helps you pause before critical actions.
Real security isolation still depends on system permissions, network access control, and each app's own permissions.