Does the 'Host Allow' or 'Host Deny' function take precedence in VigilEnt Security Agent for Windows (NETIQKB31722)

goal
Does the 'Host Allow' or 'Host Deny' function take precedence in VigilEnt Security Agent for Windows?

fact

VigilEnt Security Agent for Windows 2.X

fact
VigilEnt Security Agent for Windows 3.X

fix
The 'Host Deny' function takes precedence.  VSANT_deny = ALL will prevent any core service(s) from accessing the agent even though VSANT_allow has been configured.  When using Host_allow, deny is implicit for any other IP address.  Host Deny can only be assigned to specific IP addresses.

Formerly known as NETIQKB31722