App Control: Write Rules Are Not Working Over UNC Path

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Write action custom rules are not taking effect on UNC paths

Environment

• App Control Console: All Supported Versions

Cause

App Control only tracks execute actions over a UNC path,  it does not track write actions to a UNC path

Resolution

Use something outside of App Control to control network shares like NTFS(Active Directory) and sharing permissions