Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Endpoint Standard: What Rules Take Precedence - Permission Rules or Blocking and Isolation Rules?

Endpoint Standard: What Rules Take Precedence - Permission Rules or Blocking and Isolation Rules?

Environment

  • Carbon Black Cloud Console: All Versions
    • Endpoint Standard (formerly CB Defense)
  • Endpoint Standard Sensor: All Versions

Question

What rules take precedence - Permission rules or Blocking and Isolation rules?

Answer

  • By design Permissions take precedence over Blocking and Isolation policy rules.  This is why Permissions are often referred to as "exclusions" or "bypass rules".
  • Core Preventions may take precedence even if there is a permission rule in place.

 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-20-2020
Views:
1170
Contributors