Nextgen 2.0 needs the whitelist above and a whitelist of PHP files so the “Manage Galleries” options all work.
Rotate, Edit Thumbnail, Meta and the other functions need a php whitelist.
Add the following to your Firewall if using BPS Pro
/nextgen-gallery/products/photocrati_nextgen/modules/ngglegacy/admin/(.*).php