Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How to Create a Rule to Prevent Processing of Lower Ranked Rules

App Control: How to Create a Rule to Prevent Processing of Lower Ranked Rules

Environment

  • App Control Agent: All Supported Versions
  • App Control Console: All Supported Versions

Objective

To create a Custom Rule that will stop the processing of lower ranked Custom Rules.

Resolution

Create an Expert Rule and enable the option "Stop Rule Processing" with the necessary criteria.

Additional Notes

  • Rule ranking is significant only for rules that Block, Allow, or Prompt the user to block or allow.
  • The highest ranking Block, Allow, or Prompt rule that matches an attempted file action not only takes precedence but stops processing of any lower-ranked rules matching the action. 
  • A rule whose action is Approve, Approve as Installer, Track, Report, Promote or Ignore does not stop processing of lower-ranked rules.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
949
Contributors