Environment
- Carbon Black Cloud Console: All Versions
- Carbon Black Cloud Sensor: All Versions
- Microsoft Windows: All Supported Versions
- Apple macOS: All Supported Versions
Objective
To take sensors out of quarantine mode
Resolution
From Endpoints page
- Search for Device(s) to unquarantine
- Select desired Device(s)
- Click Take Action > Unquarantine devices
- Unquarantine device confirmation window appears
- Select desired option
Unquarantine the # selected devices
Unquarantine all # devices matching the search
- Click Yes
From Investigate page
- Select an Event
- Click on the Device tab on upper sub-menu
- Click the Take Action > Unquarantine device
- Unquarantine device confirmation window appears
Are you sure you want to unquarantine device {DeviceName}
- Click Request Unquarantine
Additional Notes
There is not currently a method to remove devices from quarantine locally (without the console).
Related Content
