Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How To Change Enforcement Level (Locally)

App Control: How To Change Enforcement Level (Locally)

Environment

  • App Control Agent: All Supported Versions

Objective

Change the Agent's Enforcement Level locally when the Server is disconnected, or otherwise unavailable.

Resolution

The Enforcement Level of the Agent is controlled by the Server. If the connection to the Server is active, or restored, the Enforcement Level will not be able to be set locally. This means the Agent must be instructed to disconnect from the Server first, even if the connection is otherwise unavailable. These commands will require authentication in order to be successfully entered.

Windows:
cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password GlobalPassword
dascli disconnect
dascli enforcement 40

Linux:
cd /opt/bit9/bin
./b9cli --password GlobalPassword
./b9cli --disconnect
./b9cli --enforcement 40

macOS:
cd /Applications/Bit9/Tools/
./b9cli --password GlobalCLIPassword
./b9cli --disconnect
./b9cli --enforcement 40
 
The available Enforcement Levels/Values are:
  • High Enforcement: enforcement 20
  • Medium Enforcement: enforcement 30
  • Low Enforcement: enforcement 40
  • Local Approval: enforcement 35
  • Visibility: enforcement 60
  • Disabled: enforcement 80

Additional Notes

  • When Enforcement is set via the cli commands, it will not persist a reboot or if the connection to the Server is restored.
  • If the Global Password is not known, modification of the Enforcement Level will not be possible.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-28-2023
Views:
188
Contributors