IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

PSC: Will Sensors start checking in again once CRL traffic is allowed?

PSC: Will Sensors start checking in again once CRL traffic is allowed?

Environment

  • PSC Console: All Versions
    • CB Defense
    • CB LiveOps
    • CB ThreatHunter
    • CB ThreatSight
  • PSC Sensor: 3.2.x.x and Lower upgrading to 3.3.x.x and Higher
  • Microsoft Windows: All Supported Versions

Question

If an older Sensor (2.0.x.x-3.2.x.x) is upgraded to a newer Sensor (3.3.x.x and higher) where access to the CRL check URLs is required, and the CRL and OCSP URLs are not allowed through the firewall or proxy, will the Sensor start checking in again once that traffic is allowed, or will an uninstall/reinstall be required?

Answer

Yes, the Sensor will start checking in again once the CRL and OCSP URLs are allowed. An uninstall/reinstall will not be required, but it may take up to 15 minutes after the changes to the firewall/proxy have been made for the Sensor to start checking in again and sending up the Event data from the period of time when it could not communicate with the Carbon Black Cloud.

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎01-15-2020
Views:
437
Contributors