cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Follow the latest information and updates available on the FireEye and SolarWinds situations here.

Carbon Black Cloud sensor: Windows desktop support

Carbon Black Cloud sensor: Windows desktop support

These Carbon Black Cloud sensor versions are currently supported as Standard or Extended. Standard support includes maintenance releases and technical support. Extended provides technical support only.

For more information, see the  CB Defense Sensor Support Policy and the Carbon Black Product Release Lifecycle Status.

To view all Carbon Black Cloud sensor versions, see  Carbon Black Cloud sensor support.

Please note that Windows 10 19H1 support currently requires a workaround documented here: https://community.carbonblack.com/t5/CB-Predictive-Security-Cloud/Update-Compatibility-with-the-Upco...

Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

Note: for each supported operting system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.

Operating system Architecture OS version Endpoint Standard Audit and Remediation* Enterprise EDR Workloads
Windows 10 20H2 x86   3.5+ 3.5+ 3.5+ N/A
  x64   3.5+ 3.5+ 3.5+ 3.6+
Windows 10 20H1 x86 v2004 3.5+ 3.5+ 3.5+ N/A
  x64   3.5+ 3.5+ 3.5+ 3.6+
Windows 10 19H2 x86 v1909 3.4+ 3.4+ 3.4+ N/A
  x64   3.4+ 3.4+ 3.4+ 3.6+
Windows 10 19H1 x86 v1903 3.4+ 3.4+ 3.4+ N/A
  x64   3.4+ 3.4+ 3.4+ 3.6+
Windows 10 October 2018 Update x86 v1809 2.1.0 —  3.6.0 3.3+ 3.4+ N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows 10 April 2018 Update x86 v1803 2.1.0 —  3.6.0 3.3+ 3.4+ N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows 10 Fall Creators Update x64 v1709 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
  x86   2.1.0 —  3.6.0 n/a 3.4+ N/A
Windows 10 Creators Update x64 v1703 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
  x86   2.1.0 —  3.6.0 n/a 3.4+ N/A
Windows 10 Anniversary Update x64 v1607 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows 10 x64 v1507, v1511 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows 8.1 x86 SP0, Update 1, Update 2 2.1.0 —  3.6.0 3.3+ 3.4+ N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows 8 x86 SP0 2.1.0 —  3.6.0 3.3+ 3.4+ N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3/6+
Windows 7 x86 SP1 2.1.0 —  3.6.0 3.3+ 3.4+ N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+
Windows Vista x86, x64 SP2 2.1 3.2.1 None None None

Note: The — indicates through and inclusive of; for example, 2.1 — 3.4 indicates 2.1 through and inclusive of 3.4.


*Additional Resources:
Carbon Black Cloud Sensor Support for OSQuery

Comments

 About CB LiveOps, v3.4 is not supported?? V3.3 only??

When is the end of support for Win7?
At least Jan 2021 is required.

Same question as above, any ideas how long Win7 will be supported by CBD?

Any projected support for Windows 7 Embedded?

Any info on Windows 10 19H2 or 1909 update support status?

Our firm has ran across an issue with Windows 10 1909 and CB Cloud sensor version 3.5.0.1523 while testing our new 1909 VDI deployment. The issue occurs after installing the sensor on a brand new machine and then performing a reboot.  The system's event viewer has a "volmgr error" event and the pagefile is at maximum size.

After opening CB support case, I decided to do some more testing. Confirmed that this occurs even when performing a manual OS installation using the Win 10 1909 ISO. (no MS updates, no Office apps, no 3rd party software, no AD or GPOs - just the OOB Windows installation.)

This screenshot represents the observed pagefile size and that the system is using the default pagefile setting:Win1909_pagefile.png

 

Sensor version 3.4.x does not have this issue. The only way we have found to bypass the problem is to manually set the system pagefile size(which is weird) or use 3.4.x.

Side note: This is very frustrating. I feel like we are always beta testing this product. We love Bit9 (for the most part...lol), and we loved CB response. Kinda wishing we would have stuck with CB Response and glad we didn't drop Bit9.

 

Additional update - seems to affect Win 1809 editions (Workstation & Server)

Win 7 SP0 became EoL?

And why LiveOps of Win 10 FCU x86/CU x86 change status from 3.3+ to n/a?

@yukisato 

CB LiveOps is only supported on x64 systems and NO x86 support have been made available from the very beginning.

I am not sure about Win7SP0, but never seen it been being supported at any time.

 

This capture is information of 2019 December

スクリーンショット 2020-05-26 10.00.38.png

 

Does the Carbon Black Cloud sensor support "LTSC(LTSB)" edition of Windows 10?

Would you please refer for LTSC(LTSB).

https://docs.microsoft.com/en-us/windows/whats-new/ltsc/

 

Regards,

Takayuki SUZUKI

 

---------------------------------------------------------------------------------------------------------------------------

VMware Japan guy had given me the answer that the sensor supporting  "LTSC(LTSB)".

I would like to close my question. Thank you so much.

 

Regards,

Takayuki SUZUKI

 

 

We are about to roll out CB Sensors to all WIndows and MAC laptops next week. I was looking for some quick answers on the following. 

  1. Does the CB Sensor deployment require Windows Defender to be deactivated? 
    1. If so does the installer automatically deactivate it?
  2. Does the CB Sensor deactivate Windows Firewall?
  3. Does the CB Sensor require and special ports to be open on a local Windows or MAC firewall

isnt workloads only for server OS, and not the various win 10 OS that is listed above?

There's note that says:

Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

 

However, "Audit and Remediation" listing does include x86 OSes as supported.

This should be fixed!

Team, do we have CB sensor supported over Windows XP. How can we protect customer desktop having Win XP OS

@ndhyani, XP support is already out of support, but if you still want install sensor to them, check out following KB;

Cb Defense: How To Download Legacy Sensor for Windows XP/Server 2003 

Article Information
Author:
Creation Date:
‎02-05-2019
Views:
9311