Whitelist Software Delivery Packages

Owned by Anonymous
Last updated: Apr 21, 2015 by Max Pinion (Deactivated)

Arellia can connect and scan software delivery packages for applications to whitelist using the Arellia Application Control Solution. 

You can scan software delivery packages on one of the following systems:

After you have scanned software delivery packages, you can then whitelist them by doing the following steps:

  1. Import the "Application Control - Package Whitelisting" data feed (for instructions on how to import data feeds, go to Using Data Feeds).
  2. Then navigate to Policies > Arellia Solutions > Application Control > Policies > Whitelisting.
  3. Right-click the Whitelisting folder and click New > Whitelist Software Delivery Packages.
  4. Name the policy.
  5. Select all of the packages that will be included in this policy.
  6. Create a description.
  7. Click OK.



  8. The package filters will appear in the Application Control > Filters > Inventory Filters > Package Filters folder as shown in the following screenshot.
  9. If the package filter is empty, you can run the Collection Update task under Tasks > Infrastructure Scheduled Activities to update the filter collections.

Important

If the contents of a package change, you'll need to run either the Inventory Package or Inventory Packages task (under Tasks > Server Tasks > File Inventory).

Manual Steps

Here are the manual steps to whitelist contents of scanned software delivery packages.

  1. Navigate to Policies > Arellia Solutions > Application Control > Filters > Inventory Filters.
  2. Right-click Inventory Filters and select New > MSI Package Contents Filter.
  3. Name the filter and then select a software delivery package to include in the filter.
  4. Save the filter
  5. This filter can then be used as a target in Application Control Policies

Important

If the filter does not list any executables, then execute the File Inventory command on that package. Navigate to Tasks > Server Tasks > File Inventory and schedule the Inventory Packages command to run on that package.

Whitelisting