EDR: Cb Threat Intel enabled but not connected. Error code: 601

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Error on the UI "Cb Threat Intel enabled but not connected."
• Error code: 601

Environment

• EDR (Formerly Carbon Black Response) Server: All Supported Versions

Cause

• Network issue caused by the proxy.
• SSL inspection was enabled.

Resolution

• EDR Server must be able to communicate to "https://threatintel.bit9.com:443".
• There should not be any SSL inspection enabled on any node between Alliance and the EDR server.