Endpoint Standard: Which Local Mirror Server Will Be Used in AV Signature Update?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Which Local Mirror Server will be used in AV Signature Update if multiple server URLs are specified in the policy settings?

Environment

• Endpoint Standard Sensor: Versions 2.0.x and above
• Microsoft Windows: All Supported Versions

Resolution

The sensor will follow this priority:

1. The Master server (the server with the checkbox "Master" checked) will be used first
2. If Master server is unavailable, Endpoint Standard Sensor will test the download speed of all listed mirror servers and pick the fastest one to download AV signature update from