Cb Defense: Citrix ICA Client Crashes with Sensor version 3.2.x.x

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Updated to Windows sensor 3.2.0.x or 3.2.1.x
• Citrix Receiver is not working as expected
• Citrix Receiver generates multiple error dialog windows with fatal error
• Need to restart Citrix Receiver program to make it work

Environment

• Cb Defense Windows Sensor: 3.2.0.x and 3.2.1.x

Cause

Engineers have identified an interoperability issue with Cb Defense and Citrix Receiver.

Resolution

• A fix to this issue will be included in the 3.3 release of the sensor.
• You can add the following API bypass rule as a workaround:
  • Application(s) at path: *:\Program Files*\Citrix\ICA Client\SelfServicePlugin\SelfService.exe -> Performs any API operation -> Bypass

Additional Information

• No new cases are needed regarding this issue, as the cause had been identified and will be included in the 3.3.x.x sensor.
• If the above API Bypass rule does not allow you to work around the issue, you may also try the following:
  • Application(s) at path: *:\Program Files*\Citrix\** -> Performs any API operation -> Bypass