Application whitelisting is a great idea, but there&#x27;s simply too much management overhead for it to feasible in anything but the most security-conscious environments. In a large network (WRT number of users), you&#x27;re gonna need an FTE just to keep the policies&#x2F;hashes updated (we tried it on a small scale years ago at a previous job and quickly abandoned the idea).<p>FWIW, I <i>do</i> have Barracuda spam appliances and I&#x27;d bet $10 that they <i>don&#x27;t</i> catch this.