Application Whitelisting allows only trusted software to run on your network, which protects your network from malware threats.
Arellia's Application Control Solution allows you to manage applications on your network in a flexible way:
- Put known trusted software in a Whitelist
- Put potentially trusted software in an Orangelist (also known as a graylist)
- Put everything else in a Blacklist
The standard operating system image(s) can be leveraged to build an initial whitelist. Add to that all packages in the IT delivered software repository, which can also be added to a whitelist. Applications can also be trusted by owner, digital certificate, vendor, location, etc.
[[In order to implement a whitelisting set of policies:]]
You can add applications to your whitelist
using the following attributes:
Reference systems
Managed software
File ownership
Digital signature
Vendor
LocationsYou
can determine a second attribute from the preceding list for whitelisted applications that will fall out of the whitelist range and into the orangelist.Creating a whitelist that targets applications according to file hashes is not very manageable because every time an application is updated, the file hash changes and the application will fall off the whitelist, requiring you to re-add it to the whitelist policy. The Application Control Solution allows you to target applications for your whitelists according to its digital signature, allowing for a dynamic whitelist–when these applications are updated, the digital signature does not change and the application will stay whitelisted.
Arellia Application Security Solution enables the implementation of whitelists in a large, distributed client environment.
As the Whitelist and Orangelist policies both did not have the Continue enforcing policies after enforcing this policy selected, no additional policies will be evaluated once criteria has been met. As such, any applications that don’t meet the Whitelist or Orangelist criteria will be blacklisted when this policy has a larger Policy priority.
| Child pages (Children Display) |
|---|