CB Protection: Is it possible to set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW"?
book
Article ID: 290932
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Is it possible to set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW"?
Environment
CB Protection Server: All Versions
CB Protection Agent: All Versions
Resolution
No. By default you cannot set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW". The option is grayed out and cannot be changed from the console.
Additional Information
According to the CB Protection User Guide: "The protection level for computers in this policy while they are out of communication with the Cb Protection Server. If the Connected Enforcement Level is Low (or None) the Disconnected Enforcement Level is identical to the Online, and cannot be modified directly. If the Connected Enforcement Level is High or Medium, you can choose an Disconnected Enforcement Level of High or Medium, and it may differ from the Connected Enforcement Level."