Whitelist software

[WrathOfAchilles]

Hi Guys,

I'm trying to find some software that allows whitelists to be implemented (define a set of executables that are allowed to be run on a server / prevent those set executables from being overwritten with rogue executables by specifying file path names etc) but i'm not having much luck. Doesn't have to be freeware.

Do you have any reccomendations / experience of using / configuring this sort of software? Deadlines are looming!!!


Kind regards,
Martin

 

[theheyes]

I'm pretty sure you can do this with hash rules which can be added to group policy objects. The problem with hash rules are they need to be updated with the software, so if you have lots of packages being updated regularly you could end up making a rod for your own back.

Have a google for hash rules and see if it fits your problem.