NSE6-EDR-AD-7-0: Fortinet NSE 6 - FortiEDR 7.0 AdministratorDemo

In FortiEDR, a Communication Control Policy's rules, such as a Deny action for a specific application, take effect only on collectors that belong to a collector group the policy has been explicitly assigned to; a policy that denies an application but has no collector groups attached to it will not block that application on any endpoint. Because the collector generating FileZilla traffic belongs to the DBA collector group while the Finance Policy, already configured to deny FileZilla, has not been assigned to that group, assigning the Finance Policy to the DBA collector group is what causes the existing Deny rule to be enforced against that collector.