The ENS Firewall Extension normalizes all digital signer data when added using the ePolicy Orchestrator (ePO) server console.
Example:
Below is the format for the digital signer data for Microsoft Corporation:
Signer = CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Below is how the digital signer data appears after you save the ENS policy:
NOTE: The S= data item is normalized to ST= when you save the policy.
Signer = CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US
The normalized digital signer data ST= is then normalized back to S= when the policy is sent to the client agent as a Trellix Agent policy. This input issue occurs only when you view the digital signer data within the policy on the ePO server and has no effect on rules or exclusions.