Environment
- Carbon Black Cloud Console: All Versions
- Endpoint Standard
- Enterprise EDR
- Audit & Remediation
- Workload
- Carbon Black Cloud Sensor: 3.5.3.x and Higher
- Apple macOS: All Supported Versions
Objective
Provide steps for checking the connection from a local machine to the content delivery network (
https://content.carbonblack.io) which provides additional configuration for 3.5.3.x and higher Sensors
Resolution
Via Browser
- Open desired browser
- Go to https://content.carbonblack.io
- Successful connection response is an XML error for missing Key-Pair-Id
This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
<Code>MissingKey</Code>
<Message>Missing Key-Pair-Id query parameter or cookie value</Message>
</Error>
Via cURL
- Launch terminal emulator
- Run command to connect to https://content.carbonblack.io
curl https://content.carbonblack.io
- Successful connection response is an XML error for missing Key-Pair-Id
<?xml version="1.0" encoding="UTF-8"?><Error><Code>MissingKey</Code><Message>Missing Key-Pair-Id query parameter or cookie value</Message></Error>
Via wget
- Launch terminal emulator
- Run command to connect to https://content.carbonblack.io
wget https://content.carbonblack.io
- Successful connection response is a 403 error
Resolving content.carbonblack.io (content.carbonblack.io)... <ip_addresses> ...
Connecting to content.carbonblack.io (content.carbonblack.io)|<ip_address>|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
YYYY-MM-DD hh:mm:ss ERROR 403: Forbidden.
Additional Notes
- Since these tests are not being done using the authentication employed by the Sensor, they will fail in this way when there are no other network errors/issues
- Misconfigured firewalls or proxies can present a number of different errors outside of the above, and should be investigated with your networking team
Related Content
