EDR: Network Isolation Does not Work on eBPF Sensors

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

After isolating a Linux sensor network traffic is still get in and out of the isolated machine

Environment

• Linux Kernel: Version 4.x and Higher
• EDR Linux Sensor: 7.x and Higher

Cause

Network Isolation is not currently supported with EDR Sensors that support kernel version 4.X and higher 
 

Resolution

Carbon Black is currently working to resolve this issue 

Additional Information

Please see also see CB-38504 in the release notes linked here CB-38504