IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: What Happens When an Agent Is Disconnected or the Server Is Offline?

App Control: What Happens When an Agent Is Disconnected or the Server Is Offline?

Environment

  • App Control Agent: All Supported Versions
  • App Control Server: All Supported Versions

Question

What happens on the endpoint when the Agent cannot communicate with the Server, such as during a Server upgrade or other communication outage?

Answer

  • Agents will not be able to receive new Rules, Approvals, Bans, Agent Management, or any other data that would involve communication with the Server.
  • Agents will continue to enforce according to Policy settings (Rules > Policies > relevant Policy > Disconnected Enforcement). By default Disconnected and Connected Enforcement are the same.
  • Agents will store up to 5,000 Events locally, and send the Events once the connection is restored.

Additional Notes

Should the 5,000 Event threshold be reached; Agents will purge Health Check and Informational type Events from the local cache before purging Block and Malware related Events.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1467
Contributors