App Control: Is the ransomware rapid config necessary in high enforcement

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the Ransomware rapid config need to be enabled if High Enforcement is enabled?

Environment

• App Control Server: 7.2.0 and Higher (formerly CB Protection)
• High Enforcement policy applied

Resolution

The rapid config is not necesary, but can help improve protection in the event a malicious file is accidentally approved

Additional Information

• High and Medium enforcement have shown to protect against previously seen forms of ransomware
• The rapid config will monitor for any document renames