App Control: How to Create a Rule to Prevent Processing of Lower Ranked Rules
book
Article ID: 286712
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
To create a Custom Rule that will stop the processing of lower ranked Custom Rules.
Environment
App Control Agent: All Supported Versions
App Control Console: All Supported Versions
Resolution
Create an Expert Rule and enable the option "Stop Rule Processing" with the necessary criteria.
Additional Information
Rule ranking is significant only for rules that Block, Allow, or Prompt the user to block or allow.
The highest ranking Block, Allow, or Prompt rule that matches an attempted file action not only takes precedence but stops processing of any lower-ranked rules matching the action.
A rule whose action is Approve, Approve as Installer, Track, Report, Promote or Ignore does not stop processing of lower-ranked rules.