Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Incorrect Auto-Deregistration of VDI due to last Check-In delay

Carbon Black Cloud: Incorrect Auto-Deregistration of VDI due to last Check-In delay

Environment

  • Carbon Black Cloud Console: All Versions
    • Audit & Remediation (Formerly CB LiveOps)
    • Endpoint Standard (Formerly CB Defense)
    • Enterprise EDR (Formerly CB ThreatHunter)
  • Carbon Black Cloud Windows Sensor: All Versions
  • US Backend (Prod05)

Symptoms

VDI endpoints are auto-deregistered despite recent events being searchable in the Investigate page.

Cause

A data pipeline bottleneck is preventing the Last Check-In time from being properly updated.

Resolution

Increase the Auto Deregistration time to Greater than 1 Hour.

Additional Notes

Future enhancements to the US Backend will resolve the bottleneck.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-30-2020
Views:
481
Contributors