Environment
- Carbon Black Cloud Console: All Versions
- Endpoint Standard (formerly CB Defense)
- Endpoint Standard Sensor: All Versions
Question
What rules take precedence - Permission rules or Blocking and Isolation rules?
Answer
- By design Permissions take precedence over Blocking and Isolation policy rules. This is why Permissions are often referred to as "exclusions" or "bypass rules".
- Core Preventions may take precedence even if there is a permission rule in place.
Related Content