How Cisco AMP4E Application whitelisting works !!

[Sky.w3lker]

AMP4E gurus, App whitelisting allows only pre-approved and specified programs to run. Any other program not whitelisted is blocked by default.
Is this doable in AMP4E?
Or it would scan new apps and allow if clean ?!

[Troja007 · Accepted solution]

Hello @Sky.w3lker,
sorry to say, no. Secure Endpoints Application Block/Allow Lists are designed to control dynamic detections and handling Cloud Hash Lookups. Secure Endpoint does not provide doing an endpoint lockdown defining trusted applications to be allowed to run, defining trusted updaters by e.g. files or certificates or blocking everything which is not allowed to run.
Greetings,
Thorsten