CB Protection: Is it possible to set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW"?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Is it possible to set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW"?

Environment

• CB Protection Server: All Versions
• CB Protection Agent: All Versions

Resolution

No. By default you cannot set the disconnected enforcement of a policy to "HIGH" if the connected enforcement is "LOW". The option is grayed out and cannot be changed from the console.

Additional Information

According to the CB Protection User Guide: "The protection level for computers in this policy while they are out of communication with the Cb Protection Server. If the Connected Enforcement Level is Low (or None) the Disconnected Enforcement Level is identical to the Online, and cannot be modified directly. If the Connected Enforcement Level is High or Medium, you can choose an Disconnected Enforcement Level of High or Medium, and it may differ from the Connected Enforcement Level."