CB Response Cloud: How to Change the Status of the Whitelisting Service

[#1]

Environment

• CB Response Cloud: All Versions

Objective

To change or update the status of an already whitelisted IP address

Resolution

1. Open Terminal from the Whitelist endpoint.
2. Run the cURL command:

   curl -X PATCH "https://cbrc.carbonblack.io/api/whitelist/enabled" -H  "accept: application/json" -H  "X-Auth-Token: <YOUR_TOKEN>" -H  "Content-Type: application/json" -d "{  \"state\": true}"

3. A response will be received showing that the change was received:

   204 NO CONTENT

4. Apply all changes.

Additional Notes

• Add the X-Auth-Token being used.
• The status can be updated to either True or False to enable or disable the whitelist.
• If step 4 is not followed - the changes not being applied - then everything can be lost.

Related Content

EDR Hosted: How to Approve an IP Address for WebUI Access
CB Response Cloud: How to Apply Changes when Whitelisting an IP Address
CB Response Cloud: How to Delete a Whitelisted IP Address
CB Response Cloud: How to View the Status of the Whitelisting Service
REST API Reference CB R 6.3+ - Carbon Black Developer Network