Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Endpoint Standard: Issues in accessing PDFs shared and transferred by multi-function copier

Endpoint Standard: Issues in accessing PDFs shared and transferred by multi-function copier

Environment

  • Endpoint Standard sensor: 3.6.0.1897
  • Carbon Black Cloud console: All supported versions
  • Microsoft windows: All supported versions

Symptoms

  • The documents can be scanned by multi-function copier and the file was changed to PDF
  • When trying to access the PDF through a shared folder, the PDF icon is displayed, however PDF cannot be accessed.
  • Following error is displayed on the multi-function copier:
Unexpected SMB server error
  • No alerts are observed in Carbon Black cloud console .
  • The issue is resolved after applying "monitored policy", by placing sensor in bypass mode or by uninstalling the sensor.

Cause

The cause of this issue is under investigation.

Resolution

  1. If a similar issue is experienced collect logs outlined in Carbon Black Cloud: How to Collect Process Monitor Logs (Windows)
  2. Open a case with Carbon Black Support referencing this article and the logs uploaded

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-18-2021
Views:
210
Contributors