> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/whitelist/add-whitelist-entry.md).

# Add Whitelist Entry

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Add Whitelist** in the upper-right corner of the [whitelist overview](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/whitelist.md#whitelist-overview) to create a new whitelist entry for Advanced Persistent Threats (APTs). The **Hosts** → **Advanced Persistent Threats** → **Whitelists** → **Add** view opens.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FudpRLRV46RIwqJnyjfJ9%2Fenginsight-screenshot-hosts-apt-whitelist-add%20whitelist.jpg?alt=media&amp;token=295835b1-4dcb-4e8c-810f-d8637a4f7b46" alt=""><figcaption></figcaption></figure>

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Add Whitelist** after configuring all settings to save and create the new whitelist entry.

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Back** to return to the overview.

{% hint style="danger" %}
**Please note**: If you leave this view without clicking **Add Whitelist**, all configured settings will be lost permanently lost!
{% endhint %}

***

## General Settings

Here you can configure various basic settings.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F4Pk99l2BATmUCwq0JJ5j%2Fenginsight-screenshot-hosts-apt-whitelist-add%20whitelist-general%20settings.jpg?alt=media&amp;token=79862fc0-0ed0-4ce6-821f-f063ec243976" alt="" width="563"><figcaption></figcaption></figure></div>

The following options are available:

<table><thead><tr><th width="200.4140625">Option</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Enter a meaningful name for the whitelist entry.</td></tr><tr><td>Description</td><td><p>Provide a more detailed description for the whitelist entry.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>This field is optional.</p></div></td></tr><tr><td>Enabled</td><td><p>Enable the whitelist entry to exclude specific hosts or file paths from APT scans.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>This option is enabled by default.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Select or deselect the checkbox <i class="fa-square">:square:</i> next to <strong>Enabled</strong> to enable or disable the whitelist entry.</p></td></tr></tbody></table>

***

## Assigned Hosts

Here you can define the hosts or groups of hosts to which the configured settings should apply.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FYR7UyXLPL5lH4nfJExPa%2FEnginsight-EN-Assigned%20References.jpg?alt=media&amp;token=cebf4535-0c6c-4404-a071-76821b8fc228" alt=""><figcaption></figcaption></figure></div>

The following options are available:

<table><thead><tr><th width="199.625">Option</th><th>Description</th></tr></thead><tbody><tr><td>Hosts</td><td><p>Define the hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Hosts</strong> field to expand a list of all available hosts, then select one or more hosts. Alternatively, use the free-text search to find hosts in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added host to remove it from the <strong>Hosts</strong> field.</p></td></tr><tr><td>Tag Logic</td><td><p>Define how many tags an assigned host must have for the settings to apply to it.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>The default tag logic is <strong>All Tags are Present in the Reference</strong>.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tag Logic</strong> field to expand a list of all available options.<br><br>The following options are available:</p><ul><li><strong>All Tags are Present in the Reference:</strong> An assigned host must have all specified tags for the settings to apply to it.</li><li><strong>At Least One of the Specified Tags is Present:</strong> An assigned host must have at least one of the specified tags for the settings to apply to it.</li></ul></td></tr><tr><td>Tags</td><td><p>Define tags for groups of hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tags</strong> field to expand a list of all available tags, then select one or more tags. Alternatively, use the free-text search to find tags in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added tag to remove it from the <strong>Tags</strong> field.</p></td></tr></tbody></table>

### Excluded Hosts

Here you can define which hosts or groups of hosts should be explicitly excluded from the configured settings.

{% hint style="info" %}
Defining excluded hosts is optional.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Define Exceptions** next to **Assigned Hosts** to show the options for **Excluded Hosts**.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FOwkoC0RXeV3yJg6fqoh0%2FEnginsight-EN-Excluded%20References.jpg?alt=media&amp;token=25189e42-a39b-4936-a80a-3780807e258f" alt=""><figcaption></figcaption></figure></div>

<i class="fa-gear">:gear:</i> Configure all settings as described for an assigned host.

***

## File Paths

Define the file paths to which the whitelist entry should apply.

{% hint style="info" %}
Specifying file paths is optional.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Add Field** to add a field for entering a file path.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FS0aQstgJkpXEbgoelkY7%2Fenginsight-screenshot-hosts-apt-whitelist-add%20whitelist-filepaths.jpg?alt=media&amp;token=647b5db0-ddaf-439b-8150-c0d849e3e172" alt=""><figcaption></figcaption></figure>

The following options are available:

<table><thead><tr><th width="199.8125">Option</th><th>Description</th></tr></thead><tbody><tr><td>File Path</td><td><p>Enter a file path.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You can use wildcards (*) here.</p></div></td></tr><tr><td>Delete</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Delete</strong> icon <i class="fa-trash">:trash:</i> next to an added file path to remove the respective path from the whitelist entry.</td></tr><tr><td>Add Field</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> <strong>Add Field</strong> to add the file path to the whitelist entry and show another field for entering an additional file path.</td></tr></tbody></table>

***
