Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
This article describes how to determine which device status counts towards total license utilization.
Environment
Carbon Black Cloud (Formerly PSC): All Supported Versions
Resolution
This chart provides the licensing impact and explanation of each device status:
Status
Licensing Impact (Y/N)
Explanation
Active
Y
Installed and actively checking into the cloud
Bypass
Y
Installed and in Bypass mode, no protection on device
Deregistered
N
Uninstalled
Eligible for Update
N
Not on the latest sensor version
Errors
Y
Installed but needs to be reviewed for error cause
Inactive
N
Installed but have not checked in for 30+ days
Pending
N
Invitation sent but not installed
Quarantine
Y
Installed and in Quarantine, device protected and has limited network connectivity outside of communicating with the cloud
Additional Information
The CB Cloud Product is licensed per endpoint.
Any endpoint being actively protected by a CB Cloud sensor counts towards total license utilization.
At this time we do not currently have a fully encompassing "status" for these endpoints but they would fall under "Active","Bypass","Quarantine" and "Errors".
If exported to CSV the status column can be filtered on to display these statuses.
If total license utilization is still unclear, please reach out to your Customer Success Manager or Account Manager at Carbon Black for assistance.