1) the whitelist has nothing to do with automated connection. It allows you to connect only to know devices, instead of every central device that tries to.
2) yes. The BLE peripheral is only advertising. Its the central device thats actually starting he connection process. So you need to make your central device to scan continuously (or e.g. every 10 seconds) - watch out for battery consumption!