Trust files in complex cases with Airlock Allowlisting 5.3

Airlock Digital v5.3

Trust files in complex cases with
Airlock Allowlisting 5.3

 

The latest version of Airlock Allowlisting, v5.3, is now in general availability and customers can take advantage of improved flexibility and ease of use when using the product to allow trusted applications and block the rest.

As with all versions of Airlock Allowlisting, we have applied practices developed over the years running allowlisting at large corporates to v5.3, with a focus on enabling customers to define and manage trust within their organizations. 

  1. The first small but important change we’ve made is to rename ‘application captures’ to ‘allowlists’ providing a clearer distinction between allowlisting and blocklisting product components, improving Airlock Allowlisting’s intuitiveness for administrators. 

  2. This also sets the stage for the next and most important change we’ve made in v5.3, which is the addition of allowlist metadata rules. Accessible via the allowlist tab, allowlist metadata rules enable administrators to create multi-conditional rules for allowlists in the same way they can for blocklists, meaning they can apply a wide range of criteria to trust files. 
    For example, administrators can combine folder path rules with user groups or publishers to permit files to execute only in specific circumstances. This feature significantly improves product flexibility by enabling granular control over file trust.

  3. We’ve also helped customers review and clean up their allowlist package rule sets by providing greater visibility of what is contained in their packages. This increased visibility is achieved through file extensions and publisher summaries. These options help customers reduce their policy sizes by converting hash-based trust to publisher trust.

  4. Our team has also extended flexibility to the one-time pad feature that gives administrators the ability to issue time-limited exceptions to select users, enabling them to execute files outside policy where required. Administrators can now customize the duration of exceptions to meet time-specific requirements such as change windows.

  5. Another key change we’ve made is to rebuild the Windows Enforcement Agent GUI, positioning us to deliver features for customers faster. This rebuild delivers the first of new features, which is the inclusion of buttons within user notifications supporting URL and email links.

  6. Lastly, product documentation has been modernised and integrated fully into the product to be more accessible, easy to read and scalable for the future.

This represents a handful of items in the release, with many more changes contained within. Please  review the v5.3 change log for the complete change detail. I would like to thank our customers for providing fantastic feedback through this development cycle as we continue to make allowlisting easier than ever. Stay tuned for more developments, we are just getting started!

Airlock Digital is here to help!
Book a demo with any of our team members by clicking the button below.