SecureAPlus Forum

Forum Support => Software Problems and Questions => Topic started by: San Hong on October 04, 2016, 05:52:15 PM

Title: Pre-approve whitelist?
Post by: San Hong on October 04, 2016, 05:52:15 PM
It is said the latest version has a new feature called "Pre-approve whitelist".
What is it? How does it work?

As a programmer, I hope an anti-exe program could permanently whitelist an entire folder, such that I do not need to whitelist my new programs manually and frequently.
Could the "Pre-approve whitelist" do this?

I think maybe you could add some screenshots in your future changelog, especially when you add new features. :)

Best regards,
San Hong
Title: Re: Pre-approve whitelist?
Post by: hendy on October 05, 2016, 10:25:04 AM
For programmer, we would recommend to set the compiler or linker as a trusted installer. Any file that is created by a trusted installer compiler or linker, will be automatically set as a trusted application.
If you are a script progammer, you can set the IDE that you use to create your script as a trusted installer. For example, if you always use notepad.exe to create script, you can set notepad.exe as a trusted installer. By setting it as a trusted installer, everything that created by notepad.exe will be automatically trusted. For the details on how to set the trust level, please refer to: https://support.secureaplus.com/set-trust-levels-for-your-file/ (https://support.secureaplus.com/set-trust-levels-for-your-file/)

The example of Pre-approved whitelist usage:
An administrator want to push a msi installer to the client machine via GPO.
Usually the regular users will be running under non-trusted user account (https://support.secureaplus.com/what-are-trusted-groups-and-trusted-users/ (https://support.secureaplus.com/what-are-trusted-groups-and-trusted-users/)), which means that they will be running in lockdown mode (https://support.secureaplus.com/what-is-lockdown-mode/ (https://support.secureaplus.com/what-is-lockdown-mode/)). Without pre-approved whitelist, the msi installer that push by the administrator to the user machine will get blocked.

Pre-approve whitelist feature is an extra feature that can be purchased by SecureAPlus users.
For more details reference, with screenshots, etc., we are still preparing it. When it is ready, it will be available as one of the article at https://support.secureaplus.com (https://support.secureaplus.com).

Best regards,
Hendy Chandra