App Control: Rules with <OnlyIf:Hostname:> fail to expand on endpoint
search cancel

App Control: Rules with <OnlyIf:Hostname:> fail to expand on endpoint

book

Article ID: 289872

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

  • Rules with <OnlyIf:Hostname:> fail to expand on endpoints
  • Trace.bt9 shows error 
    MacroManager::EvaluateString: Macro expansion failed Handler[<OnlyIf:HostName:]

Environment

  • App Control: All versions

Cause

Macro doesn't handle the slash "\" between the domain name and hostname

Resolution

  • Only use hostname and wildcard in <OnlyIf:Hostname:>. Avoid using <OnlyIf:Hostname:domainame/hostname>
Powered by Wolken Software