Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Defense: Sensor Failing to Report Events

CB Defense: Sensor Failing to Report Events

Environment

  • CB Defense Sensor: Version 3.5.0.1523
  • Microsoft Windows: All Supported Versions

Symptoms

  • Events not reported in Console
  • Live Response not working
  • 3 Policy Settings Selected/Enabled at once
    1. Submit unknown binaries for analysis
    2. Delay execute for cloud scan
    3. Local Scanner enabled

Cause

Local Scanner lookup requests failing to upload, due to an incorrectly set timeout when uploading a binary for analysis

Resolution

  • Reboot
Or, if a reboot is not practical/possible;
  • Restart of Sensor Services, by running the following authenticated RepCLI commands from the Sensor Directory 'C:\Program Files\Confer'
  1. repcli bypass 1
  2. repcli stopCbServices
  3. sc start CbDefense
  4. repcli bypass 0
NOTE:
  • Stopping and restarting the sensor service (repmgr) will leave the machine unprotected for that interval
  • This resolution will only temporarily stop the condition, it is not a permanent fix
WORKAROUND:
Disabling "Submit unknown binaries for analysis" to prevent the issue from occurring, until the 3.5 maintenance release is available

Additional Notes

  • If repcli authentication is not enabled, then the above restart commands will fail In this scenario and the services will not be able to be restarted
  • If repcli authentication is not allowed/not used in an Organization, then a reboot of the system will bring the services back up
  • This resolution will only temporarily stop the condition, it is not a permanent fix
  • This issue is due to be addressed in an upcoming Sensor maintenance release (Release Date & Build version, as yet, undetermined) [DSEN-7276]
  • This KB will be updated as soon as the Sensor maintenance release has been made available

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
842
Contributors