Carbon Black Cloud: Sensor Interop Issue With Caliper Maptitude
book
Article ID: 286217
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
- Maptitude application crashes upon launch when the sensor is active.
- Maptitude functions normally when the sensor is in Bypass.
Environment
- Carbon Black Cloud Console
- Carbon Black Cloud Sensor: All Supported Versions
- Caliper Maptitude
Cause
Interop issue between Maptitude and Carbon Black Cloud Sensor.
Resolution
Create a policy permission rule to Allow Maptitude:
- Identify the paths that are being affected or blocked by the sensor. The paths should be related to SSCProt.exe and KeyActivateWizard.exe.
- Log in to the Carbon Black Cloud Console.
- Navigate to Enforce > Policies > Relevant Policy > Prevention.
- In the Permissions section, click "Add file path" and add the File paths that were identified in Step 1.
<pathto>\SSCProt.exe
<pathto>\KeyActivateWizard.exe
Note: Wildcards allow the path to be more dynamic however more specific paths may increase security posture. - For the Operation Attempt > Performs any API Operation > enable: Bypass.
- Confirm the changes made.
- Save the policy changes.
Additional Information
- Allow listing and path exclusions are also suggested by Caliper for Maptitude found here.
Feedback
thumb_up
Yes
thumb_down
No