Creating a Rule to Stop Processing of Lower Ranked Rules
book
Article ID: 286712
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
To create a Custom Rule that will stop the processing of lower ranked Custom Rules.
Environment
App Control Agent: All Supported Versions
App Control Console: All Supported Versions
Resolution
Create an Expert Rule and make sure the option "Finish Rule Group" is enabled.
The option "Stop Rule Processing" will also work but it also skips evaluating all built-in rules.
Additional Information
Rule ranking is significant only for rules that Block, Allow, or Prompt the user to block or allow.
The highest ranking Block, Allow, or Prompt rule that matches an attempted file action not only takes precedence but stops processing of any lower-ranked rules matching the action.
A rule whose action is Approve, Approve as Installer, Track, Report, Promote or Ignore does not stop processing of lower-ranked rules.