EDR: Threat Intelligent Feeds update Sync errors due to 127.0.0.1 disabled

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Airgapped EDR server cannot update Threat Intelligent Feeds with error "New task error" after running cbfeed_airgap script.

Environment

• EDR: All supported versions
• Linux: All supported versions

Cause

Current cbfeed_airgap script only supports localhost 127.0.0.1 address.

Resolution

1. Provide HAR file and Cbdiag to Tech Support team to confirm the root cause.
2. Enable 127.0.0.1 as localhost IP address if possible, which should fix the issue.
3. A fix to cbfeed_airgap script will be updated with new EDR releases. The current plan is pointing to 7.7.0 release.
4. Contact Tech Support team for help if are not able to enable 127.0.0.1 but you need workaround before the fix is released.