Carbon Black Cloud: How to Enable\Disable Bypass from the Web Console?
book
Article ID: 286137
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
How to Enable\Disable Bypass from the Web Console?
Environment
Carbon Black Cloud (Formerly PSC) Console: All Versions
Carbon Black Cloud Sensor: All Supported Versions
Microsoft Windows: All Supported Versions
Apple MacOS: All Supported Versions
Resolution
Enable Bypass or Disable Bypass can be done from the Endpoints page or the Investigate Page
Endpoints/Workloads Page
Search for the device to Enable\Disable Bypass on
Select the checkbox to the left of the device to be quarantined
Select "Take Action"
From the drop down choose "Enable Bypass" to Enable Bypass on a device or or "Disable Bypass" to take a device out of Bypass
A popup box will appear with the following message:
Enable\Disable device
Are you sure you want to:
o Enable\Disable Bypass on the x selected devices
o Enable\Disable Bypass on all x devices matching the search
Yes or Cancel
Select "Enable\Disable Bypass on the x selected devices" to Enable Bypass only the device selected. If "Enable\Disable Bypass on all x devices matching the search" is selected then all devices currently displayed in the Endpoint page will be put into or taken out of Bypass
Select "Yes" to complete the Enable\Disable Bypass request
A popup box will appear with the following Message:
Enable\Disable Bypass Successful
When the the device has received the request to Enable\Disable Bypass, the device status will update accordingly
Investigate Page
#%$ Does not apply to ThreatHunter #%$
Search for the device to Enable\Disable Bypass on
Select the Device tab
Select "Take Action"
From the drop down choose "Enable Bypass" to Enable Bypass on a device or or "Disable Bypass" to take a device out of Bypass
A popup box will appear with the following Message:
Enable\Disable Bypass Successful
When the the device has received the request to Enable\Disable Bypass, the device status will update accordingly