When the self-approval feature is enabled, administrators receive approval requests from users. Administrators review the requests and can define rules for one or all endpoints.
The reputation value for a file is color-coded to indicate trusted, malicious, and unknown reputation:
Values in green indicate that the file is Known Trusted, Most Likely Trusted, or Might be Trusted.
Values in orange indicate that the file is unknown.
Values in red indicate that the file is Known Malicious, Most Likely Malicious, or Might be Malicious.
Values in grey indicate that reputation value is Not applicable (only for network path execution requests).
The reputation source indicates the source from where the reputation is fetched. Possible values for reputation source are GTI, Application Control, Not synchronized, or Not Applicable.