Local whitelist and predictive whitelisting
This central setting enables or disables the use of the local whitelist.
The following configuration options are available:
-
Enable local whitelist:
Once the policy with this setting is assigned, the DriveLock Agent starts the learning mode and afterwards activates the local whitelist with the learned applications.
-
Enable predictive whitelisting in connection with Enable predictions based on publisher certificates:
Particularly during update processes, this option ensures the following automation: Files are automatically added to the local whitelist provided that they match the product description or are signed by a similar certificate as the ones of the files learned in the local whitelist.
Use this option to quickly and easily allow update processes (e.g. of browsers). Creating well-defined rules for updating applications via local learning (for example, using learning behavior recording, using the recording results in application behavior rules, or specifying permissions accurately) is more time-consuming, but it gives you a more reliable result.