Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Cb Defense: Sensor States Returned by v3 API

Cb Defense: Sensor States Returned by v3 API

Environment

Cb Defense API v3 and above

Question

When exporting device data via API calls there is a column called "sensorstate" and it looks like there can be more than 1 sensorstate attached to a machine. What do they mean, and which ones should I pay attention to?

Answer

There are several values for the sensorstate of a given device. The following four states are worth knowing, and they have the meanings listed below. These all are different ways in which Bypass can be enabled.

Sensor StateMeaning
REPUX_ACTIONBypass initiated by end user
CSR_ACTIONBypass initiated by admin
UNSUPPORTED_OSBypass initiated by sensor due to unsupported Operating System
SENSOR_UPGRADE_IN_PROGRESSTransient Bypass due to sensor upgrading

Additional Notes

Related Content

Cb Defense: How to Utilize Bypass Mode

Cb Defense: API URLs

Cb Defense: How to Update Sensors from Dashboard

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-27-2017
Views:
663
Contributors