How To Determine Active License Count

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

This article describes how to determine which device status counts towards total license utilization.

Environment

• Carbon Black Cloud (Formerly PSC): All Supported Versions

Resolution

This chart provides the licensing impact and explanation of each device status:

Status	Licensing Impact (Y/N)	Explanation
Active	Y	Installed and actively checking into the cloud
Bypass	Y	Installed and in Bypass mode, no protection on device
Deregistered	N	Uninstalled
Eligible for Update	N	Not on the latest sensor version
Errors	Y	Installed but needs to be reviewed for error cause
Inactive	N	Installed but have not checked in for 30+ days
Pending	N	Invitation sent but not installed
Quarantine	Y	Installed and in Quarantine, device protected and has limited network connectivity outside of communicating with the cloud

Additional Information

• The CB Cloud Product is licensed per endpoint.
• Any endpoint being actively protected by a CB Cloud sensor counts towards total license utilization.
• At this time we do not currently have a fully encompassing "status" for these endpoints but they would fall under "Active","Bypass","Quarantine" and  "Errors".
• If exported to CSV the status column can be filtered on to display these statuses. 
• If total license utilization is still unclear, please reach out to your Customer Success Manager or Account Manager at Carbon Black for assistance.