How to Delete a Whitelisted IP Address

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To delete a whitelisted IP address

Environment

• EDR Server: All Versions

Resolution

1. Open Terminal from the Whitelist endpoint
2. Run the cURL command: 

   curl -X DELETE "https://cbrc.carbonblack.io/api/whitelist/entries/<ID>" -H  "accept: application/json" -H  "X-Auth-Token: <YOUR_TOKEN>"

3. A response will be received when this is successful: 

   204 NO CONTENT

4. Apply the changes

Additional Information

The command requires the X-Auth-Token and the unique ID of the IP address being deleted