Blog Viewer

Carbon Black Cloud: Is a Reboot Required After Sensor Upgrade?

By CB_Support posted 24 days ago

  

Environment

  • Carbon Black Cloud Sensor: All Supported Versions

Question

Does upgrading the Carbon Black Cloud Sensor subsequently require or force a reboot?

Answer

  • Upgrades do not require a reboot, unless needed to initialize newly introduced drivers (see Additional Notes).
  • Sensors left in a Bypass Error Status post-upgrade may require a reboot to remediate.
  • Endpoints will never be forcefully rebooted after upgrading the Sensor, unless specified by a third-party utility (e.g. SCCM). 

Additional Notes

  • The 3.7 Windows Sensor introduced an additional driver that monitors the storage volume for ransomware attacks against the MBR.
  • Upgrades from pre-3.7 Sensor versions to 3.7 or higher will require a reboot to gain the benefit of this new ransomware functionality.

Related Content



#ManagedDetectionandResponse
#Workload
#AuditandRemediation
#Prevention
#Container
#EndpointStandard
#ManagedDetection
#EnterpriseEDR
#CarbonBlackCloud
0 comments
0 views

Permalink