Activate local whitelist and predictive whitelisting

Use these central settings to activate or deactivate the use of the local whitelist or predictive whitelisting.

1. Enable local whitelist:

   Once the policy with this setting is assigned, the DriveLock Agent starts the learning mode and afterwards activates the local whitelist with the learned applications.

2. Predictive whitelisting based on digital signatures:

   This setting offers the following automatism, especially for update processes: Files are automatically added to the local whitelist if they either have the same product description or the same digital signature as the signatures of the files learned in the local whitelist.

   Use this option to quickly and easily allow update processes (e.g. of browsers). Creating well-defined rules for updating applications via local learning (for example, using learning behavior recording, using the recording results in application behavior rules, or specifying permissions accurately) is more time-consuming, but it gives you a more reliable result.

   As of version 2024.1, predictive whitelisting is deactivated by default and must be activated manually. Please ensure that the settings of older and newer agents do not differ, as this can otherwise lead to changes in behavior.