CB Defense: Will sensors continue to check-in if port 80 is blocked?

[#1]

Environment

• CB Defense PSC Web Console: All Versions
• CB Defense Sensor: 3.3 and Higher
• Microsot Windows: All Versions

Question

If access is initially allowed to ocsp.godaddy.com and crl.godaddy.com on TCP Port 80 in Firewall/Proxy to ensure successfull sensor install, will sensors continue to check in if access to GoDaddy CRL and OSCP servers are later blocked?

Answer

No. Sensor checkins will work for a short while, but when Windows CRL cache expires it will attempt to check the CRL/OSCP server again. If access to ocsp.godaddy.com and crl.godaddy.com on TCP Port 80 is later blocked in the Firewall/Proxy sensor checkins will fail.

Related Content

CB Defense: Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?
Carbon Black Cloud: Sensor not connecting via proxy/firewall