Blocks on a DFS path that should be approved by a custom rule
Environment
App Control Agent: All Versions
Microsoft Windows: All Versions
Cause
Expected behavior
Resolution
DFS is a hard thing with respect to path rules. When the agent evaluates a rule, the name has been normalized to the physical location. Adding the true (non DFS) path to the rule will be required for it to correctly work.