IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Endpoint Standard: What Rules Take Precedence - Permission Rules or Blocking and Isolation Rules?

Endpoint Standard: What Rules Take Precedence - Permission Rules or Blocking and Isolation Rules?

Environment

  • Carbon Black Cloud Console: All Versions
    • Endpoint Standard (formerly CB Defense)
  • Endpoint Standard Sensor: All Versions

Question

What rules take precedence - Permission rules or Blocking and Isolation rules?

Answer

  • By design Permissions take precedence over Blocking and Isolation policy rules.  This is why Permissions are often referred to as "exclusions" or "bypass rules".
  • Core Preventions may take precedence even if there is a permission rule in place.

 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-20-2020
Views:
1229
Contributors