Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Enforcement Level Field Blank When Placed In Local Approval

App Control: Enforcement Level Field Blank When Placed In Local Approval

Environment

  • App Control Console: 8.9+

Symptoms

  • Moving device into Local Approval Policy shows a Blank Field under the Enforcement Column, instead of 'Local Approval'
  • Running dascli status command on the local device shows that the Policy move has in fact taken place and is in Local Approval

Cause

Underlying Code fails to properly show Enforcement Level for devices currently in Local Approval

Resolution

This issue is being tracked under EP-18141 and will be fixed in a future release of the Server. In the meantime manually navigating to "https://ServerAddress/hostsold.php" or renaming the file temporarily should workaround the issue:
  1. Log in to the App Control server with the Carbon Black Service Account.
  2. If an Agent is installed on the server you may need to temporarily disable Tamper Protection
  3. Rename the following files:
    "C:\Program Files (x86)\Bit9\Parity Console\WebUI\html\Computers.php" to Computers-backup.php
    "C:\Program Files (x86)\Bit9\Parity Console\WebUI\html\hostsOld.php" to Computers.php
  4. From an administrative command prompt issue the command: iisreset
  5. Refresh the Computers page

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-29-2023
Views:
181
Contributors