App Control: Custom Rule Not Working on DFS Path

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Blocks on a DFS path that should be approved by a custom rule

Environment

• App Control Agent: All Versions
• Microsoft Windows: All Versions

Cause

Expected behavior

Resolution

DFS is a hard thing with respect to path rules. When the agent evaluates a rule, the name has been normalized to the physical location. Adding the true (non DFS) path to the rule will be required for it to correctly work.