Modify the Risk Level in an Application Filtering Rule
You can modify the risk level in a rule that filters applications according to the risk they present to web security, for example, from high to medium. This increases web security because a blocking action can then be triggered even if an application is only a medium risk.
To work on rules for application filtering, you need to import the Application Control rule set from the library.
Select Policy | Rule Sets.
The Add New Rule Set window opens.
Expand the Application Control rule set, then expand the nested Block Applications in Request Cycle rule set.
The general settings and rules of the nested rule set appear on the settings pane.
Make sure Show details is selected.
Select the rule Block web applications with high risk and click Edit.
The Edit Rule window opens.
Under Steps, select Rule Criteria and in the Criteria section, select the upper part of the complex criteria (the one that uses the Application.IsHighRisk property), then click Edit.
The Edit Criteria window opens with the Application.IsHighRisk property selected in the properties list.
From the properties list, select Application.IsMediumRisk.
The Edit Criteria window closes and the modified criteria appears in the Criteria section.
The Edit Rule window closes and the rule with the modified criteria appears on the settings pane.
Click Save Changes.