EDR: How to Download and Install the Cb-Event-Forwarder RPM for Air-Gapped Servers

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Download and install the cb-event-forwarder on a air-gap server

Environment

• EDR Server: All Supported
• RHEL: 7.x and 8.x
• CentOS: 7.x and 8.x
• Event Forwarder: 3.4.5 and Higher

Resolution

• Use the following command to download the cb-event-forwarded rpm file

  yumdownloader destdir /tmp cb-event-forwarder

•  Use the following command to install the event forwarder

  rpm -ivh <path to download location of rpm file>
  
   For Example:
  
   rpm -ivh /tmp/cb-event-forwarder-3.8.4-1.el8.x86_64.rpm