Whitelist policies tab:
- The whitelist is a list of programs explicitly allowed via software restriction path rules.
- Whitelist Executables Currently In All Blocked Locations button
- simplifies whitelisting by adding all existing items in blocked locations to the whitelist
- When using this feature ensure you review the files added to verify no malicious or unknown programs have been added
- Whitelist policies should be as specific as possible to avoid being overridden by a more specific blacklist entry.
- This concern comes into play when using wildcards, so the use of wildcards should be avoided in whitelist rules if possible.
- Changes to policies are applied immediately; however, it may be necessary to reboot for the changes to take effect.