Global File State

Files in the File Catalog tab on the Files page have the following high-level states:

• File State indicates the approval or ban state of the file itself.
• Publisher State is the approval state of the file’s publisher (if known). The only choices are Approved, Approved by Policy, and Unapproved.
• Global State combines File State and Publisher State to determine how the file is to be treated on agent-managed computers. The File State and Global State are the same except when Publisher State is not Unapproved, and File State is not approved or banned in the same policies as the publisher.

Global State cannot be modified directly. The following table shows the possible Global States.

Table 1. Global State (for files) Cataloged by a Carbon Black App Control Server

State	Description
Approved	Allowed to execute on all computers.
Banned	Banned by hash, and not allowed to execute on any computer running in Control mode.
Approved by Policy	Allowed to execute on computers in one or more policies.
Banned by Policy	Banned by hash from execution on computers in one or more policies (in Control mode).
Unapproved	Not Approved or Banned (globally or by policy). Carbon Black App Control blocks or permits execution of an unapproved file based on the Enforcement Level of the Policy of the computer attempting the execution.
Mixed	Effective state varies by policy because File State is Banned for some policies but the Publisher State is Approved for some or all policies.