Degraded Performance with Cb Defense and Cb Response Sensors On OSX

[#1]

Version

Current (Mac)

Issue

Degraded Performance with Cb Defense and Cb Response Sensors installed concurrently on OSX

Cause

The Cb Defense(confer) Policy that the OSX machine is in requires a to tell Cb Defense to ignore the Cb Response binaries

Solution

Login to the Cb Defense WebUI and follow the below instructions to create the required bypass rule.

1. Go to Setting -> Policy
2. Select the Policy that your OSX machine is in
3. Select New Rule next to the Permissions heading
4. In the Add Permissions Rule to "X" Policy select "When an application at path and enter the path "/var/lib/cb/**"
5. for Operation select Tries to perform any operations
6. For action select Bypass and click add

Screenshot of the run creation: