App Control: Cisco Systems Certificate Approved But Not Trusted, Causing Endpoint Blocks

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Cisco Systems certificate showing as approved in App Control UI.
• Blocks occurring on Cisco applications on endpoints.
• Microsoft Windows: All Supported Versions

Environment

• App Control Server: 8.1.10 and Higher
• App Control Agent: 8.1.6 - 8.5.x

Cause

• The publisher name for the Cisco certificate in das database is "Cisco Systems, Inc.".
• The publisher name on the Cisco apps being blocked was "Cisco Systems Inc".
• Discrepancy in the publisher names caused the blocks.

Resolution

• This issue was identified and investigated in EP-11950
• EP-11950 has been resolved from agent versions 8.6 onwards

Additional Information

If this issue has been seen with newer agent versions, please contact Carbon Black support.