Carbon Black Cloud: Getting started with Content or Manifest download failures

[#1]

Environment

• Carbon Black Cloud: All Versions
• Carbon Black Cloud Sensor (Linux): v2.12.x.x and Higher
• Carbon Black Cloud Sensor (macOS): v3.5.3.x and Higher
• Carbon Black Cloud Sensor (Windows): v3.6.0.x and Higher

Objective

Getting Started with ManifestDownloadFailure (macOS, Windows) and ContentDownloadFailure (Linux) messages related to Sensors having issues downloading dynamic content manifests with additional configuration data

Resolution

Q: Why is it important to remediate these errors?

A: If Sensors are not getting the dynamic content manifests, the endpoints are not fully protected or fully activated.

• Endpoints in this state should be remediated ASAP!

• Carbon Black Cloud: Is access to content.carbonblack.io required?

Relevant Links (all Operating Systems)

• Carbon Black Cloud: How to determine if content.carbonblack.io is blocked?
• https://developer.carbonblack.com/reference/carbon-black-cloud/cb-threathunter/latest/unified-binary...
• Carbon Black Cloud: What Ports must be opened on the Firewall and Proxy Servers?
• CB ThreatHunter: What Ports must be opened on the Firewall and Proxy Servers?
• Carbon Black Cloud: What’s the static IP address or hostname used by the back-end?
• Carbon Black Cloud: What SSL cipher suites are supported/accepted for communications?
• Carbon Black Cloud: Increased Event/Alert Volume After August 31st, 2021

Relevant Links: Linux

• Carbon Black Cloud: How to remediate ContentDownloadFailure alarms (Linux)
• Carbon Black Cloud: How to Check for ContentDownloadFailure Alarms (Linux)
• Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (Linux)

Relevant Links: macOS

• Carbon Black Cloud: How to remediate ManifestDownloadFailure alarms (macOS)
• Carbon Black Cloud: How to check current dynamic Sensor Management Content Manifests (macOS)
• Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (macOS)

Relevant Links: Windows

• Carbon Black Cloud: How to remediate ManifestDownloadFailure alarms (Windows)
• Carbon Black Cloud: How to check current dynamic Sensor Management Content Manifests (Windows)
• Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (Windows)