CB Response: Threat Reports stop updating

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Threat Reports no longer updating, even after selecting "Full Sync" manually.

Environment

• CB Response On Premises: All Versions

Cause

Firewall rules had static IP set for api.alliance.carbonblack.com and threatintel.bit9.com

Resolution

Confirm that Firewall rules allow access to api.alliance.carbonblack.com and threatintel.bit9.com, as the IP addresses are not static.

Additional Information

Alliance Server connectivity requirements can be found on Page: 33 in the CB Response User Guide