App Control: Can a Performance Optimization rule and an Approve Write rule coexist?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Can a Performance Optimization (PO) rule and an Approve Writes rule coexist in the same directory?

Environment

App Control Server: All Supported Versions

Resolution

No.  As PO rules ignore file writes, the agent wouldn't be able to observe the creation of the files to approve them.

Additional Information

Further information on rule creation can be found in the User Guides as well as the Custom Rules Best Practices document.