Carbon Black Cloud: Sensor blocks without purchasing Endpoint Standard, no way to disable

[#1]

Environment

• Carbon Black Cloud Console: All Versions
  • Audit & Remediation
  • Container
  • Enterprise EDR
  • Prevention
  • Workload

Symptoms

• Organization licensed for individual products or product bundles not including Endpoint Standard (was CB Defense)
• Applications get blocked when Sensor is in Active mode
• Blocks go away when Sensor is in Bypass mode
• Where available, event data in Console shows block was due to Cb Defense

Cause

Endpoint Standard rules are enabled

Resolution

Open a case with Carbon Black Technical Support and provide

Dashboard URL (the URL used to log in)
Org Name
ORG_ID or ORG_KEY

Related Content

Carbon Black Cloud: Difference between Org ID and Org Key?
Carbon Black Cloud: Where is the Org ID Found?
Carbon Black Cloud: Where is the Org Key Found?
Carbon Black Cloud: What URLs are used to access the APIs?