IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Protection: How to block files without a Notifier

CB Protection: How to block files without a Notifier

Environment

CB Protection Console: All Supported Versions

Objective

This article explains how to modify a custom rule to block files and send the events to the CBP console, but not have the block Notifier appear on the agent's endpoint.

Resolution

1. Navigate in the console to Rules > Software Rules > Custom tab.
2. Edit an existing rule or Add Custom Rule.
3. If the execute action is Block or Prompt, you should see a checkbox for 'Use Policy Specific Notifier'.  Uncheck this box.
4. In the 'Custom Execute Notifier' field, select <none> from the drop-down.
5. Click Save and Exit.

Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎02-15-2019
Views:
509
Contributors