Endpoint Standard: How do Reputations Interact With Policy rules?

Endpoint Standard: How do Reputations Interact With Policy rules?

Environment

  • Carbon Black Cloud Console: All Versions
  • Endpoint Standard Sensor: All Versions
  • Microsoft Windows: All Supported Versions
  • Apple macOS: All Supported Versions

Question

How do Reputations interact with Policy rules? 

Answer

Policy rules and Reputations interact in different ways depending on the Policy rule type and Reputation priority.

Order of precedence:
  • Permission rules (always path-based) take precedence over all other rules and Reputations, including files that have been whitelisted or blacklisted by hash.
  • Blocking and Isolation rules configured for a specific path take precedence over all Reputation types. 
  • Reputation precedence is determined by Reputation priority.

Additional Notes

  • Reputations apply to the entire environment and are not limited to policy groups.
  • Policy rules only apply to sensors within the respective policy group.

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
483