CB Protection: Some global approvals by event rule do not approve file on endpoints

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Globally approved file blocks on endpoints.
• File rule shows as CL 0

Environment

• Cb Protection Server: 8.0.0.x

Cause

The cause is a logic error in the stored proceedure that creates the global approve. It assigns the rule a CL of 0, which never syncs to the agent. 

Resolution

1. This SQL logic error has been resolved in 8.1 and later. Please update the Cb Protection server to receive this code change. 
2. For any file rules currently not applying correctly, a deletion and recreation of the rule is required.