Creating Exceptions for Files and Publishers

You can disable reputation approvals for an individual file or publisher.

In general, you should enable reputation approvals because you want to rely on Carbon Black File Reputation data to eliminate a large number of unnecessary file blocks on trusted files. However, there might be a particular file or publisher that you do not want approved, regardless of its reputation in the Carbon Black File Reputation.

Note: If you create file or publisher exceptions before the reputation feature is enabled for the Carbon Black App Control Server, those files or publishers are unaffected by reputation rules. Exceptions added after reputation rules are enabled prevent reputation approval of newly discovered files and remove global approvals based on file reputation, but they do not undo local approval of files whose publisher was approved by reputation.