EDR: Task Error: " unable to get local issuer certificate"
search cancel

EDR: Task Error: " unable to get local issuer certificate"

book

Article ID: 288396

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Console¬†displays "New Task Error"
  • Details shows error:
    {"task_type": "Task", "task_name": "FeedSynchronizer", "timestamp": "2022-12-02 15:43:14.300738-07:00", "error_text": "Error during synchronization of feed CbCommunity(4): HTTPSConnectionPool(host='threatintel.bit9.com', port=443): Max retries exceeded with url: /api/v1/cbfeed/feed/CbCommunity?server_token=TokenHere (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))"} syn

Environment

  • EDR Console: All Supported Versions

Cause

SSL Inspection is enabled on the firewall/proxy

Resolution

 Add an exception for for the EDR traffic "threatintel.bit9.com"