Application Control events are reported back to the ePO server from a client that only has Change Control enabled

Technical Articles ID: KB89430
Last Modified: 2024-04-25 09:53:51 Etc/GMT

Environment

Application and Change Control (ACC) 8.x, 7.x, 6.x
ePolicy Orchestrator (ePO) 5.9.x, 5.3.x

Problem

Application Control events are reported to the ePO server from a client that only has Change Control enabled.

Cause

Events that are reported from a client to ePO, such as a Write_denied event, are generated by both Application Control and Change Control. All events are classified as Application Control events even if Application Control is disabled or not present on the client. This causes confusion, because there's no way to discern whether the event is specifically from Application Control or Change Control.

Solution

This issue is currently under investigation. There's no workaround or solution available at this time.

Affected Products

Known Issue/Product Defect
Trellix Application and Change Control 8.4.x
Trellix Application and Change Control 8.3.x
Trellix Application and Change Control 8.2.x
Trellix Application and Change Control 7.0.x
Trellix Application and Change Control 6.6.x
Trellix Application and Change Control 6.5.x
Trellix Application and Change Control 6.4.x
Trellix Application and Change Control 6.3.x
Trellix Application and Change Control 6.1
Troubleshooting

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Knowledge Center

Application Control events are reported back to the ePO server from a client that only has Change Control enabled

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Application Control events are reported back to the ePO server from a client that only has Change Control enabled

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title