The blacklist blocks registered products and exe files, while everything unknown is allowed by default. You can use the blacklist to block software that you want to get rid of in the long term. To enter a product in the blacklist, you have to know it, already. This method is safer because you can de-activate a blacklist configuration at any time.
The whitelist is much more effective. All products that do not belong to the operating system will be blocked right away. Nobody can install software or use software anymore that haven’t been explicitly allowed by entering them in the whitelist.
If you activate a whitelist configuration in your network, you increase the security dramatically. If the configuration is not well planned, it can increase the risk that something doesn’t work anymore you didn’t think of before. You have to do an extensive phase of planning before.
The left list shows all entries of your configuration. Click on one entry to show and modify its parameters on the right side.