In whitelist mode, unused profiles should be set to enabled by default. Why? Because if a user switches to an unused profile, all internet traffic will be enabled.