Carbon Black Cloud: SS1 agent interop issue with CBC sensor
search cancel

Carbon Black Cloud: SS1 agent interop issue with CBC sensor

book

Article ID: 285097

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

High CPU performance will occur if running SS1 agent and CBC sensor together

Environment

  • Carbon Black Cloud Sensor: All supported versions

Cause

SS1 agent attempting to inject their DLLs into our processes, which causes the interop issue with high CPU performance.

Resolution

Options:
  • Set up proper CBC exclusion rule from SS1 agent side
  • Fully disable SS1 agent

Additional Information

SS1 exclusion rule should also be added from CBC side to avoid unwanted issues.