Carbon Black Cloud: Linux Endpoints Not Updating Policy

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Some Linux sensors are in a policy where the policy is italicized. 

Environment

• Carbon Black Cloud Web Console: All Versions
• Carbon Black Cloud Linux Sensor: 2.6 - 2.7

Cause

There was an issue identified in pre 2.8 Linux sensors when assigning policies.

Resolution

The 2.8 Linux sensor has the fix for this issue.

Additional Information

When setting the policy via the console, the new policy is not applied to, and does not show up in the console for that endpoint until the next time that endpoint checks in. For Linux endpoints, the checkin occurs about once a minute. So after setting the policy name, you may see a delay before the name appears for that endpoint.