Page Comparison

What's Covered

Create a Resource Target

Create a File Scan PolicyFileScan

Create a File Parameter Selection

This document shows you how to create a whitelist policy for your reference system that targets a collection of computers, searches for Windows executables, and then adds any Windows executables to a whitelist.

Anchor
ResourceTarget ResourceTarget

Create a Resource Target

First you will need to create a resource target that contains the desired reference system(s). To create a resource target, do the following steps:

1. In the Security Manager Console, click the Resources tab.
2. In the left pane, click Resource Filters.
3. Right-click the Resource Target folder.
4. Click New > Resource Targets > Resource Target.
   
5. Enter a name and description.
6. Click OK.
   
7. In the right pane under Filtering Rules, click the Add rule button.
    
8. In the Then menu, "excludes computers not in" will be the default. 
9. In the menu just to the right of the Then menu, choose Computer List.
10. Then click Select.
     
11. In the Select Item window that opens, click the computer resources that represent your reference system(s).
12. Click OK.
    
     

Anchor
FileScan FileScan

Create a File Scan Policy

Now that you have your targeting established you can create a file scan policy to add files to your whitelist.

...

1. In the Security Manager Console, click the Policies tab.
2. In the left pane, navigate to the Arellia Solutions > Application Control > Filters > Inventory Filters.
3. Right-click the Inventory Filters folder.
4. Click New > File Scan Results Filter (Policy).
   
5. Give the filter a name and optional description.
6. Click OK.
   
   
   
   
7. In the Right pane, set the Data Source to the new policy.
8. Next to Reporting Filter click the Select link and choose the reporting filter you configured in the previous steps.
9. Under Results click Included.
10. Click Save.
    
    

Anchor
Whitelist Whitelist

Create a Whitelist Policy

When you have completed the previous steps, put them all into a Reference System Whitelist Policy by doing the following steps:

...