We’re migrating product documentation to docs.vmware.com, starting with Carbon Black Cloud. Learn more.

Carbon Black Cloud sensor: Windows desktop support

Carbon Black Cloud sensor: Windows desktop support

 

Below is a list of all current and previous Windows Carbon Black Cloud sensors. Please see the Carbon Black Cloud Sensor Support Policy and the Carbon Black Product Release Life Cycle Status pages for more information on sensors currently in Standard or Extended support.

To view all Carbon Black Cloud sensor versions, see  Carbon Black Cloud sensor support.

Please note that Windows 10 19H1 support currently requires a workaround documented here: https://community.carbonblack.com/t5/CB-Predictive-Security-Cloud/Update-Compatibility-with-the-Upco...

Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

Note: for each supported operating system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.

Operating system Architecture OS version Endpoint Standard Audit and Remediation* Enterprise EDR Workloads Vulnerability Assessment
Windows 11 21H2 x86 v21H2 In Testing In Testing
In Testing
In Testing In Testing
  x64   In Testing
In Testing
In Testing
In Testing In Testing
Windows 10 21H2 x86 v21H2 In Release Preview In Release Preview
In Release Preview
In Release Preview In Release Preview
  x64   In Release Preview
In Release Preview
In Release Preview
In Release Preview In Release Preview
Windows 10 21H1 x86 v21H1 3.6+ 3.6+ 3.6+ N/A N/A
  x64   3.6+
3.6+ 3.6+ 3.6+ 3.6+
Windows 10 20H2 x86   3.5+ 3.5+ 3.5+ N/A N/A
  x64   3.5+ 3.5+ 3.5+ 3.6+ 3.6+
Windows 10 20H1 x86 v2004 3.5+ 3.5+ 3.5+ N/A N/A
  x64   3.5+ 3.5+ 3.5+ 3.6+ 3.6+
Windows 10 19H2 x86 v1909 3.4+ 3.4+ 3.4+ N/A N/A
  x64   3.4+ 3.4+ 3.4+ 3.6+ 3.6+
Windows 10 19H1 x86 v1903 3.4+ 3.4+ 3.4+ N/A N/A
  x64   3.4+ 3.4+ 3.4+ 3.6+ 3.6+
Windows 10 October 2018 Update x86 v1809 2.1.0 —  3.6.0 3.3+ 3.4+ N/A N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
Windows 10 April 2018 Update x86 v1803 2.1.0 —  3.6.0 3.3+ 3.4+ N/A N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
Windows 10 Fall Creators Update x64 v1709 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
  x86   2.1.0 —  3.6.0 n/a 3.4+ N/A N/A
Windows 10 Creators Update x64 v1703 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
  x86   2.1.0 —  3.6.0 n/a 3.4+ N/A N/A
Windows 10 Anniversary Update x64 v1607 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
Windows 10 x64 v1507, v1511 2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ 3.6+
Windows 8.1 x86 SP0, Update 1, Update 2 2.1.0 —  3.6.0 3.3+ 3.4+ N/A N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ N/A
Windows 8 x86 SP0 2.1.0 —  3.6.0 3.3+ 3.4+ N/A N/A
  x64   2.1.0 —  3.6.0 3.3+ 3.4+ 3.6+ N/A
Windows 7
(KB4474419 patch applied)
x86 SP1 2.1.0 —  3.6.0+ 3.3+ 3.4.+ N/A N/A
  x64   2.1.0 —  3.6.0+ 3.3+ 3.4+ 3.6+ 3.6+
Windows 7 x86 SP1 2.1.0 —  3.6.0.2076 3.3.0 —  3.6.0.2076 3.4.0 —  3.6.0.2076 N/A N/A
  x64   2.1.0 —  3.6.0.2076 3.3.0 —  3.6.0.2076 3.4.0 —  3.6.0.2076 3.6.0 —  3.6.0.2076 3.6+
Windows Vista x86, x64 SP2 2.1 3.2.1 None None None N/A

Note: The — indicates through and inclusive of; for example, 2.1 — 3.4 indicates 2.1 through and inclusive of 3.4.


*Additional Resources:
Carbon Black Cloud Sensor Support for OSQuery

Comments

 About CB LiveOps, v3.4 is not supported?? V3.3 only??

When is the end of support for Win7?
At least Jan 2021 is required.

Same question as above, any ideas how long Win7 will be supported by CBD?

Any projected support for Windows 7 Embedded?

Any info on Windows 10 19H2 or 1909 update support status?

Our firm has ran across an issue with Windows 10 1909 and CB Cloud sensor version 3.5.0.1523 while testing our new 1909 VDI deployment. The issue occurs after installing the sensor on a brand new machine and then performing a reboot.  The system's event viewer has a "volmgr error" event and the pagefile is at maximum size.

After opening CB support case, I decided to do some more testing. Confirmed that this occurs even when performing a manual OS installation using the Win 10 1909 ISO. (no MS updates, no Office apps, no 3rd party software, no AD or GPOs - just the OOB Windows installation.)

This screenshot represents the observed pagefile size and that the system is using the default pagefile setting:Win1909_pagefile.png

 

Sensor version 3.4.x does not have this issue. The only way we have found to bypass the problem is to manually set the system pagefile size(which is weird) or use 3.4.x.

Side note: This is very frustrating. I feel like we are always beta testing this product. We love Bit9 (for the most part...lol), and we loved CB response. Kinda wishing we would have stuck with CB Response and glad we didn't drop Bit9.

 

Additional update - seems to affect Win 1809 editions (Workstation & Server)

Win 7 SP0 became EoL?

And why LiveOps of Win 10 FCU x86/CU x86 change status from 3.3+ to n/a?

@yukisato 

CB LiveOps is only supported on x64 systems and NO x86 support have been made available from the very beginning.

I am not sure about Win7SP0, but never seen it been being supported at any time.

 

This capture is information of 2019 December

スクリーンショット 2020-05-26 10.00.38.png

 

Does the Carbon Black Cloud sensor support "LTSC(LTSB)" edition of Windows 10?

Would you please refer for LTSC(LTSB).

https://docs.microsoft.com/en-us/windows/whats-new/ltsc/

 

Regards,

Takayuki SUZUKI

 

---------------------------------------------------------------------------------------------------------------------------

VMware Japan guy had given me the answer that the sensor supporting  "LTSC(LTSB)".

I would like to close my question. Thank you so much.

 

Regards,

Takayuki SUZUKI

 

 

We are about to roll out CB Sensors to all WIndows and MAC laptops next week. I was looking for some quick answers on the following. 

  1. Does the CB Sensor deployment require Windows Defender to be deactivated? 
    1. If so does the installer automatically deactivate it?
  2. Does the CB Sensor deactivate Windows Firewall?
  3. Does the CB Sensor require and special ports to be open on a local Windows or MAC firewall

isnt workloads only for server OS, and not the various win 10 OS that is listed above?

There's note that says:

Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

 

However, "Audit and Remediation" listing does include x86 OSes as supported.

This should be fixed!

Team, do we have CB sensor supported over Windows XP. How can we protect customer desktop having Win XP OS

@ndhyani, XP support is already out of support, but if you still want install sensor to them, check out following KB;

Cb Defense: How To Download Legacy Sensor for Windows XP/Server 2003 

When will Windows 11 be supported? 

Article Information
Author:
Creation Date:
‎02-05-2019
Views:
38130