Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How To Silence the Notifier For a Specific File or Script That is Blocked From Running

App Control: How To Silence the Notifier For a Specific File or Script That is Blocked From Running

Environment

  • App Control Server: 8.1.10 and Higher

Objective

To silence the notifier for a specific file or script that is being blocked from running.

Resolution

  1. Login to App Control UI.
  2. Go to "Rules > Software Rules > Custom" and click "Add Custom Rule" button.
  3. Create the custom rule to ban that specific file/script: App Control: How To Create a Custom Script Rule.
  4. Assign the custom rule to the desired policy.
  5. Adjust the policy-specific settings, as needed.

Additional Notes

Every policy includes an Advanced Setting for each rule type. Each of these policy settings has a Notifier field in which one can specify the notifier that appears on agent computers when that type of rule blocks an action. By default, rules that block or prompt use the policy-specific notifier. If the policy-specific notifier is silenced, notifiers would not be received for any file/script that triggered the built-in rule to block the file/script from running. This is why creating a specific rule to ban the file/script in question is recommended.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-17-2021
Views:
378