Local whitelist and predictive whitelisting

This central setting enables or disables the use of the local whitelist.

The following configuration options are available:

  1. Enable local whitelist:

    Once the policy with this setting is assigned, the DriveLock Agent starts the learning mode and afterwards activates the local whitelist with the learned applications.

  2. Enable predictive whitelisting in connection with Enable predictions based on publisher certificates:

    Particularly during update processes, this option ensures the following automation: Files are automatically added to the local whitelist provided that they match the product description or are signed by a similar certificate as the ones of the files learned in the local whitelist.

    Use this option to quickly and easily allow update processes (e.g. of browsers). Creating well-defined rules for updating applications via local learning (for example, using learning behavior recording, using the recording results in application behavior rules, or specifying permissions accurately) is more time-consuming, but it gives you a more reliable result.