search cancel

DCS:SA 6.x Whitelisting policy warning events are blue in colour.

book

Article ID: 161700

calendar_today

Updated On:

Products

Data Center Security Server Data Center Security Server Advanced

Issue/Introduction

You wish to understand why DCS:SA 6.x Whitelisting policy warning events are blue in colour.

Resolution

The Whitelisting Strategy policy is new to DCS:SA 6.0. This strategy provides protection for the operating system, and prohibits the launching of applications, except those that are explicitly listed in the policy configuration. 

Applications that are not whitelisted are blocked by routing all their associated process activity to the "deny_ps" sandbox, creating a "Process Assignment" warning event that is blue in colour. The "deny_ps" sandbox does not log activity, so no additional File Access blocked event will be seen.