EDR: Threat Intelligent Feeds update Sync errors due to 127.0.0.1 disabled
book
Article ID: 287501
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Airgapped EDR server cannot update Threat Intelligent Feeds with error "New task error" after running cbfeed_airgap script.
Environment
- EDR: All supported versions
- Linux: All supported versions
Cause
Current cbfeed_airgap script only supports localhost 127.0.0.1 address.
Resolution
- Provide HAR file and Cbdiag to Tech Support team to confirm the root cause.
- Enable 127.0.0.1 as localhost IP address if possible, which should fix the issue.
- A fix to cbfeed_airgap script will be updated with new EDR releases. The current plan is pointing to 7.7.0 release.
- Contact Tech Support team for help if are not able to enable 127.0.0.1 but you need workaround before the fix is released.
Feedback
thumb_up
Yes
thumb_down
No