Carbon Black Cloud: SS1 agent interop issue with CBC sensor
book
Article ID: 285097
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
High CPU performance will occur if running SS1 agent and CBC sensor together
Environment
- Carbon Black Cloud Sensor: All supported versions
Cause
SS1 agent attempting to inject their DLLs into our processes, which causes the interop issue with high CPU performance.
Resolution
Options:
- Set up proper CBC exclusion rule from SS1 agent side
- Fully disable SS1 agent
Additional Information
SS1 exclusion rule should also be added from CBC side to avoid unwanted issues.
Feedback
thumb_up
Yes
thumb_down
No