Endpoint Standard: Endpoint UI still sees blocked alerts when dismiss future alerts is selected

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

End users still see blocks for the same events despite "If this alert occurs in the future, automatically dismiss it from all devices" being checked when the alert was dismissed

Environment

• Carbon Black Cloud: All versions
  • Endpoint Standard Sensor: All Versions

Cause

This feature only dismisses alerts in the Carbon Black Cloud console. 

Resolution

There is not currently a feature to dismiss recurring blocks on a device.

Additional Information

If an application is being blocked frequently and is trust, consider adding an approval for the file through permissions, IT Tools, or certificate approvals. https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-Methods-to-Whitelist-Applications/ta-p/43815