Updated on 2024-03-28 GMT+08:00

Extending the Process Whitelist

After HSS completes learning on the servers associated a policy, if you find the learning outcomes are much fewer than the process fingerprints detected by HSS, or if too many suspicious processes are reported, you can extend the whitelist. HSS will compare the application processes it learned with and the asset fingerprints it detected, identify trustworthy processes, and add them to the process whitelist.

Procedure

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  1. In the navigation tree, choose Prevention > Application Process Control.
  1. Click the Whitelist Policies tab.
  2. Click a policy name. The Policy Details page is displayed.
  3. Click the Associated Servers tab.
  4. In the row of a server, choose More > Add to Whitelist in the Operation column.
  5. Click Compare to compare the server process fingerprint with the application processes learned by HSS.
  6. Select trustworthy processes and click Add.