Carbon Black Cloud: What Is The Expected Behavior of Banning the Carbon Black Endpoint Standard Sensor Services?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What will happen if any of the Carbon Black Cloud Endpoint Standard services are added to the Banned List?

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Enterprise Standard Sensor: All Versions

Resolution

While there is no ability to stop the action of adding the services to the Banned List, the sensor has built in protection for actions like this. The services can be added to the banned list, but the sensor won't block or do anything beyond generating alerts in the UI.