Full-sized notifiers (all Windows notifiers and Prompt notifiers on Mac and Linux) include different components. There are components that are always present, some of them are optional, and others can be customized.
The full-sized notifiers can include the following components:
- The title appears at the top of the window. For example, Security Notification – Unapproved File.
- The notifier provides information about the Target of the action. For example, if an execution was attempted, target information includes the file the user attempted to execute, its path, and the process that attempted to execute it.
- A logo appears in the upper left of the notifier. By default, this is the Carbon Black App Control logo, but it can be changed or removed.
- On Mac and Linux computers, an additional subtitle appears, for example Unapproved software has been prevented from running on this computer.
- Notifier text, which appears in the top text box in the notifier, provides a description of what is blocked and why. For example, App Control blocked an attempt by explorer.exe to run calc.exe because the file is not approved. If you require access to this file, please contact your system administrator. On Mac and Linux computers, similar detail is available for each notifier event in the Notifier history window – see Notifier Tray Icon and History Window.
- On Windows computers, an optional notifier URL link can point to a site that explains security policy and/or provides an opportunity to request access to a blocked object. The link can also be configured to initiate a mail message to request access.
- On Windows computers, a history panel in the notifier shows files that have been blocked on that computer. A green check mark indicates that a file was allowed to run or write. A red x indicates that the file or action was blocked, either by an Carbon Black App Control rule or by user choice. A yellow triangle indicates that the notifier timed out before the user took action (and so the action was blocked). A question mark indicates the current block event (for example, the one that caused the current notifier to display). On Linux and Mac, a similar history is available in the Notifier history window – see Notifier Tray Icon and History Window.
- An Approval Request or Justification panel allows users to file formal approval requests for files or devices that they cannot currently access, or justifications for why they chose to allow an action if they were given a choice in the notifier. For more informtion about this feature, see Approval Requests and Justifications.
