Local File State

You can view local file state on the Files on Computers tab of the Files page.

Files that are globally Banned or Approved have the same local and global state. Files with a Global State of Unapproved can have different Local States. You can locally approve a file by a variety of methods as long as that file was not globally banned.

Table 1. Local State

State	Description
Approved	This file instance is approved for execution. Local approval can be due to approval by name or hash for all computers in a policy or all computers managed by this Carbon Black App Control Server. It can also be due to a global approval method, a change in Enforcement Level, or an explicit Local Approval of this single file instance. Locally approved files can have a global state of Unapproved or Approved, but not Banned.
Banned	This instance of the file is banned from execution. A file that has a local state of banned might be banned on all computers in certain policies or all computers managed by this Carbon Black App Control Server. Note that banning a file by name does not change its local state.
Unapproved	This instance of the file has not been approved or banned. Its execution is blocked or permitted based on the Enforcement Level of the computer it is on.
Deleted	This instance of the file has been deleted, but the record of it still exists in the database for this Carbon Black App Control Server.