Creating a Rule to Stop Processing of Lower Ranked Rules
search cancel

Creating a Rule to Stop Processing of Lower Ranked Rules

book

Article ID: 286712

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To create a Custom Rule that will stop the processing of lower ranked Custom Rules.

Environment

  • App Control Agent: All Supported Versions
  • App Control Console: All Supported Versions

Resolution

  • Create an Expert Rule and make sure the option "Finish Rule Group" is enabled.
  • The option "Stop Rule Processing" will also work but it also skips evaluating all built-in rules.

Additional Information

  • Rule ranking is significant only for rules that Block, Allow, or Prompt the user to block or allow.
  • The highest ranking Block, Allow, or Prompt rule that matches an attempted file action not only takes precedence but stops processing of any lower-ranked rules matching the action. 
  • A rule whose action is Approve, Approve as Installer, Track, Report, Promote or Ignore does not stop processing of lower-ranked rules.