Determine Which Rule Is Causing a Block
book
Article ID: 289200
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
To determine which rule is causing a file to be blocked.
Environment
- App Control Console: All Supported Versions
Resolution
- Login to the App Control console
- Add the "Rule Name" column:
- Navigate to Reports > Events
- Click on "Show Columns"
- Find "Rule Name" and move to the "Selected" section.
- Click Apply
- Look at the "Rule Name" column for relevant block events
Feedback
thumb_up
Yes
thumb_down
No