Verifing connectivity from endpoints to Sensor Gateway

Products

• Carbon Black Cloud Workload

Issue/Introduction

How to verify connectivity from endpoints to Sensor Gateway using healthcheck URL.

Environment

• Carbon Black Cloud Console: All Supported Versions
• Sensor Gateway: All Supported Versions

Resolution

1. Build URL by replacing <FQNDofSensorGateway> with the FQDN of the Sensor Gateway.
   • https://<FQDNofSensorGateway>/sgw/health_check
2. Use URL to connect to Sensor Gateway and verify Cert situation on Endpoint.
   • Option 1: Use REPCLI Curl command and the URL above
     • How to test connectivity using RepCLI's built in cURL? 

   • Option 2: Use the browser

     • Test URL from endpoint working and not working. (connect to site in the browser)
3. "curl code 60" or Cert error in the browser for the system not working
   1. Reviewed the cert and cert chain in the browser. 
   2. If Cert chain did not exist (it was not loaded on the PC)
   3. Manually install cert chain on system.
      1. Open MMC
      2. Add Certificates snap-in for the local Computer.
      3. Go to Trusted Root store and import Cert root and/or Intermediate Cert.
   4. Verify connectivity to the Cert server port 80 for Revocation and 443 for Cert server service in firewall or proxies. 
4. Additional errors may be found using CAPI2 logs.
   1. How to Enable Windows CAPI2 logging
5. Verify in the browser or REPCLI CURL that it works.
6. Verify in the console the sensor is connected. 

Additional Information

GPO can be used to manage and deploy Certs on Windows Endpoints.