Customize the Notifier Logo, URL, or Message

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Specifying a custom logo in the Notifier
• Specifying a custom link in the Notifier
• Changing the Notifier text

Environment

• App Control Console: All Supported Versions
• App Control Windows Agent: All Supported Versions
• App Control macOS Agent: Version 8.9.2 and higher

Resolution

Custom Logo

1. From Rules > Notifiers > relevant Notifier
2. In the Notification Logo field, choose Custom.
3. Specify the path relevant to the endpoint, examples
   • Network Path (UNC): \\FileServer\Logos\CorporateLogo.jpg
   • URL: https://FQDN.com/img/CorporateLogo.jpg
   • Local/on disk: C:\Templates\Logos\CorporateLogo.jpg
4. Click Save

Custom Message Text

1. Rules > Notifiers > relevant Notifier
2. Adjust the Notifier Text accordingly, example:

   <ProcessName> running as <UserName> was blocked by App Control from executing <TargetPathName>.
   
   If you believe this to be in error, please contact the Help Desk.

3. Click Save
   • The combination of Notifier Text, Name, and Custom Logo path cannot exceed 1900 characters in length.

Custom URL/Hyperlink

1. From Rules > Notifiers > relevant Notifier
2. Use the pattern: https://SomeLink.com<FriendlyText:Your text here> with the desired link.
   • Very long FriendlyText cannot span multiple lines, and may be truncated in the Notifier if it is too long.
3. Adjust the Notifier Link accordingly, examples:

   Invoke Email (mailto)
   mailto:[email protected]?subject=App Control Block of <TargetName>&body=<DomainName>\<ComputerName> has requested access to <TargetName>. File details available at https://AppCServer/file-details.php?hash=<TargetSha256><FriendlyText:Email the Help Desk with questions regarding this.>
   
   Invoke Browser (https)
   https://InternalServer.fqdn/api/newRequest.php?endpoint=<ComputerName><FriendlyText:Open Support Request>

4. Click Save

Additional Information

• Tech Docs > User Guide > Endpoint Notifiers > Notifiers has more information, including available tags.
• Disable the Notifier Per Policy, Custom Rule or Per Notifier
• Server, Agent and Notifier Language Support/Translations
• Image Requirements:
  • Currently each Notifier must be adjusted to specify the relevant Custom Logo.
  • Must be 60 x 60 pixels.
  • Supported formats: GIF, JPG, BMP.
  • Transparent backgrounds are not supported.
• Logo Path notes:
  • The Local System account must have access to the UNC Path specified.
  • Anonymous/unauthenticated access is required for URL Paths.
  • Agents will download a local copy of the logo when UNC or URL Paths are used.
  • Changing the logo for UNC or URL Paths will require a new Custom Logo name/path.
  • If using a Local Path, the file must be present on the endpoint.