CB Response 6.5 Integration Guide

[#1]

Note: This document applies to all 6.5 versions.

This documentation provides information for administrators who are responsible for  integrating CB Response with various other tools. It discusses:

• Integration with CB Protection (formerly Bit9)
• Integration with Microsoft Enhanced Mitigation Experience Toolkit (EMET)
• Supported SAML 2.0 specifications and SAML 2.0 Single Sign-On (SSO) setup. This includes integration with the OKTA, Shibboleth, and ADFS IdPs
• The Duo plugin, which you can configure two-factor authentication and download the Duo Mobile application on a mobile device
• Syslog output for CB Response events
• CB Response support for Virtual Desktop Infrastructure (VDI) and how to configure your machines to use it

See the Comments below for changes to this version.

[triordan]

Change log for the September 2019 CB Response 6.5 Integration Guide (changes since the most recent 6.4 version):

1. In the "Server VDI Support" chapter, information has been added to indicate that if
   the endpoint's System ID (SID) changes, Carbon Black must create a new Sensor ID for
   that endpoint.
2. Other minor corrections and improvements were made throughout the document.

Change log for the April 2020 release of the CB Response 6.5 Integration Guide:

1. Corrected VDI instructions.