Environment
- App Control Server: 8.0.0 and Higher
Question
Why are files showing as unapproved, when their certificate and publisher are showing as approved?
Answer
The approval of the file is a combination of the local and global states, including whether approved by certificate or publisher. A file showing as unapproved indicates there is no file rule created to approve its hash; globally, the file will run, as its certificate is approved, as is its publisher. If a file rule were to be created that banned this hash, then the ban would take precedence over the cert and publisher approvals, and the file would be considered "Banned". Just because a publisher or certificate of a file is approved does not automatically approve the hash; App Control will be able to block the file should the certificate or publisher of the file be revoked/unapproved at a later date.
Related Content
