IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Local State of Banned Remains After Removing Global Ban

App Control: Local State of Banned Remains After Removing Global Ban

Environment

  • App Control Server: All Supported Versions
  • App Control Agent: All Supported Versions

Symptoms

  • File was marked as Globally Banned
  • Global Ban was then removed from the file
  • File has a Local State of Banned

Cause

The local state is only checked upon execution of the file, so removing the Global Ban from the console does not immediately remove the local state of banned

Resolution

  • After removing the global ban the locally banned file will become unbanned on execution
  • At time of execution, the agent will see the global ban has been removed, reverse the local state of banned, and will allow the file to execute

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-09-2021
Views:
471
Contributors