Threat Feed Reports Stop Updating

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Threat Reports are no longer updating. Doing a manual "Full Sync" in the console shows no changes.

Environment

• Carbon Black EDR: All Versions

Cause

Firewall rules had static IP set for api.alliance.carbonblack.com and threatintel.bit9.com

Resolution

Confirm that outbound Firewall rules allow access to:

• api.alliance.carbonblack.com:443
• threatintel.bit9.com:443