DCS:SA 6.x Whitelisting policy warning events are blue in colour.
Article ID: 161700
Updated On:
Products
Data Center Security Server
Data Center Security Server Advanced
Issue/Introduction
You wish to understand why DCS:SA 6.x Whitelisting policy warning events are blue in colour.
Resolution
The Whitelisting Strategy policy is new to DCS:SA 6.0. This strategy provides protection for the operating system, and prohibits the launching of applications, except those that are explicitly listed in the policy configuration.
Applications that are not whitelisted are blocked by routing all their associated process activity to the "deny_ps" sandbox, creating a "Process Assignment" warning event that is blue in colour. The "deny_ps" sandbox does not log activity, so no additional File Access blocked event will be seen.
Feedback
Yes
No
Powered by
