Endpoint Standard: What Rules Take Precedence - Permission Rules or Blocking and Isolation Rules?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What rules take precedence - Permission rules or Blocking and Isolation rules?

Environment

• Carbon Black Cloud Console: All Versions
  • Endpoint Standard (formerly CB Defense)
• Endpoint Standard Sensor: All Versions

Resolution

• By design Permissions take precedence over Blocking and Isolation policy rules.  This is why Permissions are often referred to as "exclusions" or "bypass rules".
• Core Preventions may take precedence even if there is a permission rule in place.