App Control: How to create an Approval or Ban from the Software Rules Page

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to create an Approval or Ban from within the console.

Environment

• App Control Console

Resolution

1.  On the console menu, go to Rules > Software Rules.
2.  Click the Files tab. The File Approvals and Bans table appears:
3.  Click the Add File Rule button. The Add File Rule page appears, with Approval as the default Rule Type.
4.  Specify the rule details and the file to be approved or banned: 
   1. Provide a Rule Name so that you can identify the rule in the table.Choose the Rule Type (Approval, Ban, Ban (Report Only)
   2.  If the rule is a Ban, choose the Type (Hash or File Name).
   3.  For Hash rules, specify the type of hash you will provide (MD5, SHA-1or SHA256).
   4.  For File Name Bans, choose the platform to which the rule will apply (Windows, Mac, or Linux).
   5. Enter the Hash Value or File Name that will identify the file.
   6. Optionally, provide a Description.
   7.  In the Rule Applies To field, choose All policies or specify the Selected policies to which the rule will apply.

5. To create the approval or ban, click Save. The rule appears on the File Rules table. Group the table by Type (the default) if you want to see Bans together, Report Only bans together, and Approvals together.