CB Response Cloud: How to Check Current Ingress Filters from Windows using Powershell

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To check currently created ingress filters for a CB Response Cloud instance from Windows using Powershell

Environment

• CB Response Cloud: All Versions
• Microsoft Windows: All Supported Versions
• Microsoft Powershell: Version 3

Resolution

1. Open Run
2. Type "powershell" and press enter.
3. Configure Powershell for TLS v1.2:

• Run within Powershell for each session:

  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

4. Check currently created ingress filters:
   1. Use Invoke-RestRethod.

      Invoke-RestMethod -Headers @{"X-Auth-Token" = "<GlobalApiTokenHere>"} -Method GET -Uri https://<ServerHostnameHere>/api/v1/ingress_whitelist

   2. If option A does not work then use Invoke-WebRequest.

      Invoke-WebRequest -Headers @{"X-Auth-Token" = "<GlobalApiTokenHere>"} -Method GET -Uri https://<ServerHostnameHere>/api/v1/ingress_whitelist | Select-Object -Expand Content

Additional Information

Replace <GlobalApiTokenHere> and <ServerHostnameHere> with the appropriate information.