Carbon Black Cloud: Network is Slow or Disconnects after Sensor Installed on MacOS
Carbon Black Cloud Sensor: 3.5.1 and Higher
Apple MacOS: 11/Big Sur and later
Network is slow or disconnects entirely when MacOS is connected to Ethernet Adapter
Connections to servers are slow or timing out
Putting the Sensor in Bypass does not resolve the issue
The CBC Network Extension (NE) contains two content filters: a data filter and a packet filter. Enabling the NE registers both filters with the OS and the OS will then forward network activity to the appropriate filter.
This issue can happen as soon as the data or packet filter is enabled regardless of whether or not packets are processed.
This issue has been resolved in MacOS Monterey 12.4. The What's new for enterprise in macOS Monterey documents the following release note: "Resolves an issue where the network becomes unresponsive using multiple Network Extensions or a Network Extension with an Ethernet adapter."
If unable to upgrade to MacOS 12.4, the following may workaround the issue: