App Control: Does the Agent Provide Protection in Safe Mode?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the Agent provide protection in Safe Mode?

Environment

App Control Agent: All Supported Versions
Microsoft Windows: All Supported Versions

Resolution

By default the option to load the Agent in Safe Mode is disabled. To enable this go to Rules > Policies > relevant Policy > and enable the option: Load Agent in Safe Mode.

Important: Since the Agent can interfere with Safe Mode recovery operations, use this option only if you have other means of recovery (other than Safe Mode). If you have questions about enabling the Agent to run in Safe Mode, contact Carbon Black Support.

Additional Information

• This feature is not currently supported for Mac or Linux.
• If the Agent has network access to the Server in Safe Mode then Events will be sent normally. If network access is not available in Safe Mode the Events will be stored locally until the connection is restored.