Environment
- App Control Agent (formerly CB Protection): All Supported Versions
- App Control Console (formerly CB Protection): All Supported Versions
Question
Why is the event rule is not restoring the endpoints to normal enforcement?
Answer
- Each Event Rule is designed to work with one trigger at a time
- If multiple endpoints are moved from Normal to Local Approval at the same time, only one endpoint will count as the trigger
- Only the triggered endpoint will be moved back to Normal Enforcement
- Move each endpoint individually, and this way the agent will trigger an Alert per endpoint
Related Content
