App Control: Software Rules Not Honoring Changes In Console (Unprocessed Configlist)

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Agent shows as Connected and Up to Date in the Console.
• Changes to a Software Rule (Rapid Config, Custom Rule, File Rule, Publisher Approval, etc) are not being honored.

Environment

• App Control Agent: 8.6.x - 8.7.6
• Microsoft Windows: All Supported Versions

Cause

There is an issue introduced in Agent version 8.5.x+ that in rare cases prevents purging of previously enabled Config List entries such as Software Rules/Publisher Approvals

Resolution

This issue was resolved with the release of Agent version 8.7.8, and upgrading to this version or higher will resolve the issue.

Additional Information

• EP-15503: Fixed an issue where an App Control database restore could cause rules on the agent to not reflect the state of the policy settings on the server.
• Commonly referred to as the Unprocessed Configlist bug.
• Resending all Rules to an Agent will not resolve this issue.