Ask the Community
Groups
Whitelisting App Results - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="whitelisting-allows-you-to-customize-your-result-view-to-each-customer">Whitelisting allows you to customize your result view to each customer</h2> <p>While there are many use cases for excluding detections from the results, the most common customer request was the ability to still detect a specific Suspicious/Malicious finding and exclude it when it meets given criteria.</p> <div data-hs-callout-type="tip"> <p>Whitelisting can be performed at the MSP, Customer, or Device levels. Each level inherits changes from higher levels. </p> <p>So a whitelist made at the MSP level will affect all Customers, and one made at the Customer level will apply to all of that Customer's devices.</p> </div> <h3 data-id="examples">Examples</h3> <p>Suppose you have your network admin devices in RocketCyber. <strong>netstat</strong> is a perfectly valid tool for them to use, and you do not want to see notifications about it. The whitelist can remove existing results and prevent future results of that type from being reported.</p> <ol><li>Go to the customer to which you added your networking devices<img src="https://us.v-cdn.net/6032361/uploads/migrated/IX0X8IX6PPJ7/screen-shot-2021-02-24-at-9-02-36-pm.png" alt="Screen_Shot_2021-02-24_at_9.02.36_PM.png" class="embedImage-img importedEmbed-img"></img></li> <li>Since this particular notification is in <strong>Advanced Breach Detection</strong>, go to that app and select at least one of the checkboxes next to a result for <em>netstat. </em> </li> <li>Click the <strong>Action</strong> button at the bottom-right, and select <strong>Add to Whitelist</strong><em><br><img src="https://us.v-cdn.net/6032361/uploads/migrated/4M8TW0FF43CP/whitelist2.png" alt="whitelist2.png" class="embedImage-img importedEmbed-img"></img><br></em> </li> <li>Select the checkbox(es) for what you would like to whitelist.</li> <li>If you want to remove existing records as well as preventing new ones, select the checkbox in the bottom-right labeled <strong>Remove Existing Records.</strong> </li> <li>Click <strong>Add</strong> </li> </ol><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/8QZ4O4IASQ6B/screen-shot-2021-02-24-at-9-02-43-pm.png" alt="Screen_Shot_2021-02-24_at_9.02.43_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>This type of whitelisting is available for most RocketCyber apps. See <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fkaseya.vanillacommunities.com%2Fkb%2Farticles%2Faliases%2Frocketcyber%2Fhc%2Fen-us%2Farticles%2F360018050298" rel="noopener nofollow">Custom Whitelisting</a> or <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fkaseya.vanillacommunities.com%2Fkb%2Farticles%2Faliases%2Frocketcyber%2Fhc%2Fen-us%2Farticles%2F360018050658" rel="noopener nofollow">Whitelisting and App Triage</a> for more information on whitelisting possibilities.</p> <div data-hs-callout-type="tip"> <p>Keep in mind when performing a white list configuration at the MSP root level account when you login applies this across all managed customers.</p> </div> </article> </main>