Whether or not Integration Server performs whitelist filtering is controlled by the server configuration parameter watt.server.checkWhitelist. When this parameter is set to true, whitelist filtering is enabled. Integration Server deserializes a Java object only if the class appears in the whitelist. If Integration Server encounters a Java object whose class does not exist in the whitelist, Integration Server throws a ClassNotFoundException. To enable or disable whitelist filtering, use Integration Server Administrator to change the value of the watt.server.checkWhitelist parameter.

Regardless of the watt.server.checkWhitelist value, Integration Server performs blacklist filtering when deserializing Java objects. For more information, see Integration Server Blacklist Classes File