IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Does Proxy Setting Get Overwritten on Sensor Upgrade

EDR: Does Proxy Setting Get Overwritten on Sensor Upgrade

Environment

  • EDR Sensor: All Versions
  • Microsoft Windows: All Supported Versions
  • Linux: All Supported Versions

Question

If I have a custom proxy setting in my sensor configuration, will that be overwritten when upgrading the sensor?

Answer

MethodWindowsLinuxAnswer
Upgrading via ConsoleXXProxy config setting will persist

Upgrading manually (via MSI)

X Proxy config setting will persist 
Upgrading manually (via sh) XProxy config setting will be overwritten

Additional Notes

WINDOWS

Windows will take configurations / settings found in the sensorsettings.ini file and write them to the registry. Default configurations will be updated with each upgrade. Custom configurations (like proxy) where no default value is present will persist unless:

  1. Uninstalled
  2. Deliberately overwritten with a new value from sensorsettings.ini
The above applies to MSI or console upgrades.


LINUX

Linux will take the sensorsettings.ini which comes packaged with the sensor archive and write it to:
/var/opt/carbonblack/response/
Upgrading from the console will preserve the settings. Upgrading manually via running the shell script which comes packaged with the sensor archive will overwrite the existing sensorsettings.ini in that directory, thereby overwriting any custom configurations. 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-03-2020
Views:
635
Contributors