Carbon Black Cloud: Does the Sensor Ever Get Automatically Removed?

[#1]

Environment

• Carbon Black Cloud Console: All Versions

Question

Does the Sensor ever get automatically removed from the Console?

Answer

Active Sensors that do not connect to the Console after 30 days will automatically move to an "Inactive" state. Unless the machine is a VDI, and both of the following options are enabled, the sensors should never be automatically removed from the Console.

In Endpoints>Sensor Options>Sensor Settings, the following options can be enabled:

• Delete Sensors that have been deregistered for:
  • 24 Hours
  • 1 Week
  • 2 Weeks
  • 1 Month
• Deregister VDI sensors that have been inactive for:
  • 1 Hour
  • 3 Hours
  • 24 Hours
  • 1 Week

In Enforce>Policies>"Policy">Sensor Settings, the "Auto-deregister VDI clone sensors that have been inactive for" can be enabled as well

 

Additional Notes

There are enhancement requests for additional functionality like CB Defense Automatically Purge/Remove Sensors

Related Content

https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-What-Do-The-Sensor-Status-Options-Mea...