"Sub-processes inherit conditions" setting does not apply to the list of excluded processes in Application Control

book

Article ID: 156290

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

When configuring an Application Control rule for Symantec Endpoint Protection (SEP) clients, sub-processes of processes in the "Do not apply this rule to the following processes" list are not excluded from the rule. 

Cause

The "Sub-processes inherit conditions" setting applies to the actual conditions of the rule, not the list of processes affected by the rule.

Resolution

All processes that should be excluded from the Application Control rule must be added to the "Do not apply this rule to the following processes" list.