CB Response: Error after removing integration between Response and Protection

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Error seen within the CB Protection Server page:

"Unable to connect to CB Protection Server"

Environment

• CB Response Server: 6.X
• CB Protection Server: 8.X

Cause

SQL table in Response is not updated after removing Protection integration.

Resolution

This requires an update of the cb_settings table in SQL:

psql -p 5002 cb -c "delete from cb_settings where key LIKE 'PlatformServer%';"

Additional Information

• Backup the SQL tables before editing them.
• Alterations of the database can have severe repercussions, and should only be done at the suggestions of Carbon Black Support.