IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control Server: Unapproved files not blocked by agents in high enforcement policy

App Control Server: Unapproved files not blocked by agents in high enforcement policy

Environment

  • App Control Server : All Versions

Symptoms

 Unapproved files not blocked by agents in high enforcement policy 

Cause

There was an allow execute custom rule created for target path "\device\harddiskvolume*\* "which caused any unapproved file on the endpoint to be approved for execution

Resolution

Delete the allow execute custom rule or modify the target path to be more precise 

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-22-2020
Views:
377
Contributors