Carbon Black Cloud: How to Enable\Disable Bypass from the Web Console?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to Enable\Disable Bypass from the Web Console?

Environment

• Carbon Black Cloud (Formerly PSC) Console: All Versions
• Carbon Black Cloud Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions
• Apple MacOS: All Supported Versions

Resolution

Enable Bypass or Disable Bypass can be done from the Endpoints page or the Investigate Page

Endpoints/Workloads Page

1. Search for the device to Enable\Disable Bypass on
2. Select the checkbox to the left of the device to be quarantined
3. Select "Take Action" 
4. From the drop down choose "Enable Bypass" to Enable Bypass on a device or or "Disable Bypass" to take a device out of Bypass
5. A popup box will appear with the following message: 

   Enable\Disable device 
   Are you sure you want to: 
     o Enable\Disable Bypass on the x selected devices 
     o Enable\Disable Bypass on all x devices matching the search
   Yes or Cancel

6. Select "Enable\Disable Bypass on the x selected devices" to Enable Bypass only the device selected. If "Enable\Disable Bypass on all x devices matching the search" is selected then all devices currently displayed in the Endpoint page will be put into or taken out of Bypass
7. Select "Yes" to complete the Enable\Disable Bypass request
8. A popup box will appear with the following Message: 

   Enable\Disable Bypass Successful

9. When the the device has received the request to Enable\Disable Bypass, the device status will update accordingly

Investigate Page 

#%$ Does not apply to ThreatHunter #%$

1. Search for the device to Enable\Disable Bypass on
2. Select the Device tab
3. Select "Take Action" 
4. From the drop down choose "Enable Bypass" to Enable Bypass on a device or or "Disable Bypass" to take a device out of Bypass
5. A popup box will appear with the following Message: 

   Enable\Disable Bypass Successful

6. When the the device has received the request to Enable\Disable Bypass, the device status will update accordingly