App Control: Rule Processing - Order of Precedence
App Control (Formerly Cb Protection) console : All Supported Versions
What is the order of precedence for rule processing in App Control?
The ranking is:
Updaters and Rapid Configs
User Created Custom Rules*
Out of the box internal rules for blocking/reporting*
Within Rules > Software Rules > Custom Rules there are out of the box rules that cannot be deleted. User Created rules can either be set above or below the built in rules. One scenario may call for a custom rule to be above the default "Block banned files" or "block unapproved files" and another scenario may call for it to be below. This is so that user rules can override the built in behavior if desired.
If a file is locally or globally approved, and a custom execution control rule is written to block the same file (via path/process)- the file would be blocked.