Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Rules with <OnlyIf:Hostname:> fail to expand on endpoint

App Control: Rules with <OnlyIf:Hostname:> fail to expand on endpoint

Environment

  • App Control: All versions

Symptoms

  • Rules with <OnlyIf:Hostname:> fail to expand on endpoints
  • Trace.bt9 shows error
    MacroManager::EvaluateString: Macro expansion failed Handler[<OnlyIf:HostName:]

Cause

Macro doesn't handle the slash "\" between the domain name and hostname

Resolution

  • Only use hostname and wildcard in <OnlyIf:Hostname:>. Avoid using <OnlyIf:Hostname:domainame/hostname>

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-25-2022
Views:
309
Contributors