Endpoint Standard: Cert and Hash Whitelisting randomly failing

[#1]

Environment

• Carbon Black Cloud (formerly PSC) Console: All Versions
• Endpoint Standard (formerly CB Defense) Sensor: 3.4.x

Symptoms

Applications which were previously whitelisted by cert or hash are now being blocked or alerted on

Cause

Carbon Black has identified an issue on the backend which can result in the sensor receiving a bad or corrupt whitelist file

Resolution

• Issues have been resolved in sensor version 3.5.0.869 and .49.1 backend updates
• If this issue persists, try deleting and re-adding the cert or hash to the whitelist

Additional Notes

Endpoint Standard: How to add a Certificate to the Approved List
Carbon Black Cloud: How to Utilize IT Tools Allow list Feature
Carbon Black Cloud: How to Utilize IT Tools Allow list Feature
Endpoint Standard: Reputation Priority