Graylisting

What is application graylisting?

Application graylisting allows potentially trusted applications to run securely in your environment.

Graylisting is a dynamic method of managing applications that might not be included on a whitelist or blacklist.

Thycotic's Application Control Solution allows you to manage applications flexibly in a large, distributed client environment by putting:

• Known trusted applications in a whitelist
• Potentially trusted applications in an orangelist (also known as a graylist)
• Everything else in a blacklist

Instead of putting an unknown application into an automatic blacklist, you can apply a flexible policy that includes one or more of the following actions:

• Running with demoted privileges
• Running read-only
• Notifying end users of corporate policy
• Running in a virtual layer
• Target internet-facing applications

By limiting an application’s impact to the operating system and other software, end users can use a piece of software and allow IT to review the software for black or white listing at a later date. At that later date a piece of software could be permanently allowed, denied for risk or legal reasons, or moved to a permanent graylist.

Related links

• Prevent read and write access to file types or locations
• Protect against Internet applications
• Restrict an application's process rights
• Run an application in a workspace virtualization layer