Environment
- Carbon Black Cloud Console
- Carbon Black Cloud Sensor: All Supported Versions
- Caliper Maptitude
Symptoms
- Maptitude application crashes upon launch when the sensor is active.
- Maptitude functions normally when the sensor is in Bypass.
Cause
Interop issue between Maptitude and Carbon Black Cloud Sensor.
Resolution
Create a policy permission rule to Allow Maptitude:
- Identify the paths that are being affected or blocked by the sensor. The paths should be related to SSCProt.exe and KeyActivateWizard.exe.
- Log in to the Carbon Black Cloud Console.
- Navigate to Enforce > Policies > Relevant Policy > Prevention.
- In the Permissions section, click "Add file path" and add the File paths that were identified in Step 1.
<pathto>\SSCProt.exe
<pathto>\KeyActivateWizard.exe
Note: Wildcards allow the path to be more dynamic however more specific paths may increase security posture. - For the Operation Attempt > Performs any API Operation > enable: Bypass.
- Confirm the changes made.
- Save the policy changes.
Additional Notes
- Allow listing and path exclusions are also suggested by Caliper for Maptitude found here.
Related Content
