Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (Linux)

Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (Linux)

Environment

  • Carbon Black Cloud Console: All Versions
    • Endpoint Standard
    • Enterprise EDR
    • Audit & Remediation
    • Workload
  • Carbon Black Cloud Sensor: 2.12.x.x and Higher
  • Linux: All Supported Versions

Objective

Provide steps for checking the connection from a local machine to the content delivery network (https://content.carbonblack.io) which provides additional configuration for 2.12.x.x and higher Sensors

Resolution

Via Browser

  1. Open desired browser
  2. Go to https://content.carbonblack.io
  3. Successful connection response is an XML error for missing Key-Pair-Id
    This XML file does not appear to have any style information associated with it. The document tree is shown below.
    <Error>
    <Code>MissingKey</Code>
    <Message>Missing Key-Pair-Id query parameter or cookie value</Message>
    </Error>
 

Via cURL

  1. Launch terminal emulator
  2. Run command to connect to https://content.carbonblack.io
    curl https://content.carbonblack.io
  3. Successful connection response is an XML error for missing Key-Pair-Id
    <?xml version="1.0" encoding="UTF-8"?><Error><Code>MissingKey</Code><Message>Missing Key-Pair-Id query parameter or cookie value</Message></Error>
 

Via wget

  1. Launch terminal emulator
  2. Run command to connect to https://content.carbonblack.io
    wget https://content.carbonblack.io
  3. Successful connection response is a 403 error
    Resolving content.carbonblack.io (content.carbonblack.io)... <ip_addresses> ...
    Connecting to content.carbonblack.io (content.carbonblack.io)|<ip_address>|:443... connected.
    HTTP request sent, awaiting response... 403 Forbidden
    YYYY-MM-DD hh:mm:ss ERROR 403: Forbidden.

Additional Notes

  • Since these tests are not being done using the authentication employed by the Sensor, they will fail in this way when there are no other network errors/issues
  • Misconfigured firewalls or proxies can present a number of different errors outside of the above, and should be investigated with your networking team

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎04-11-2022
Views:
936
Contributors