Carbon Black Cloud: How to Enable/Disable Sensor Bypass on Sensors using Command Line (Windows)

[#1]

Environment

• Carbon Black Cloud: All Supported Versions
• Carbon Black Cloud (Formerly PSC/CB Defense) Sensor: 2.0.x.x and Higher
• Microsoft Windows: All Supported Versions

Objective

Provide steps to enable or disable the sensor bypass locally

Resolution

1. Launch an elevated command prompt (cmd.exe > right-click > Run as Administrator)
2. Run one of the following commands to place sensor in desired state:
   • Enable Bypass/Disable Protection 

     "C:\Program Files\Confer\Uninstall.exe" /bypass 1 <UninstallCode>

     Disable Bypass/Enable Protection

     "C:\Program Files\Confer\Uninstall.exe" /bypass 0 <UninstallCode>

Additional Notes

• As of Carbon Black Cloud Sensor version 3.3.x.x and Higher, RepCli can also be used to enable or disable sensor bypass locally. See related content
• These commands are only supported on the Windows Sensor
• Uninstall code is case sensitive, it should be entered in upper-case

Related Content

Carbon Black Cloud: How to Toggle Sensor Bypass with the RepCLI Utility (Windows)
Carbon Black Cloud: How To Collect Sensor Logs Locally (Windows)
Carbon Black Cloud: How To Collect Sensor Logs Locally (Mac)