Create a whitelist server which doesn't download the entire database, but compares the programs your company uses to the global whitelist and then applies the appropriate whitelist entries to a LOCAL whitelist. That way the overhead of the global whitelist is avoided, and updates are only run when new software is introduced into the corperation / updates of applications are rolled out.

Rocket science it isn't.