netconnect probe is red in color. Max. restarts error message in log. Version is 3.36.
nc: net_connect version 3.36, Sep 10 2018
nc: Nimsoft Corporation
Controller: Max. restarts reached for probe 'net_connect' (command = net_connect.exe)
- VMware Carbon Black security / Anti-virus
Release : 9.0.2
Component : UIM NET CONNECT
controller v7.97 HF8
Checked Windows Application event log and found that one of the programs/operations run by net_connect was being blocked and Carbon Black was throwing an Informational Event. :
The application C:\Program Files (x86)\Nimsoft Infrastructure\probes\network\net_connect\net_connect.exe invoked the application C:\Program Files (x86)\Nimsoft Infrastructure\probes\network\net_connect\cfg_ipLong_migrate.exe. The operation was blocked and the application terminated by Confer
Customer will make a change request/ask the security/AV team to create an exception for all of the programs / entire NImsoft installation directory, which in this case/installation is-> C:\Program Files (x86)\Nimsoft Infrastructure
Why Carbon Black categorizes this blocking as Informational and not at least a Warning is somewhat misleading in my opinion, but I've seen this happen before with Carbon Black/CbDefense.