IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Task Error: " unable to get local issuer certificate"

EDR: Task Error: " unable to get local issuer certificate"

Environment

  • EDR Console: All Supported Versions

Symptoms

  • Console displays "New Task Error"
  • Details shows error:
    {"task_type": "Task", "task_name": "FeedSynchronizer", "timestamp": "2022-12-02 15:43:14.300738-07:00", "error_text": "Error during synchronization of feed CbCommunity(4): HTTPSConnectionPool(host='threatintel.bit9.com', port=443): Max retries exceeded with url: /api/v1/cbfeed/feed/CbCommunity?server_token=TokenHere (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))"} syn

Cause

SSL Inspection is enabled on the firewall/proxy

Resolution

 Add an exception for for the EDR traffic "threatintel.bit9.com"

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-07-2022
Views:
391
Contributors