Application whitelisting is a great idea, but there's simply too much management overhead for it to feasible in anything but the most security-conscious environ

Application whitelisting is a great idea, but there's simply too much management overhead for it to feasible in anything but the most security-conscious environments. In a large network (WRT number of users), you're gonna need an FTE just to keep the policies/hashes updated (we tried it on a small scale years ago at a previous job and quickly abandoned the idea). FWIW, I do have Barracuda spam appliances and I'd bet $10 that they don't catch this.