EDR: Task Error: " unable to get local issuer certificate"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Console displays "New Task Error"
• Details shows error:

  {"task_type": "Task", "task_name": "FeedSynchronizer", "timestamp": "2022-12-02 15:43:14.300738-07:00", "error_text": "Error during synchronization of feed CbCommunity(4): HTTPSConnectionPool(host='threatintel.bit9.com', port=443): Max retries exceeded with url: /api/v1/cbfeed/feed/CbCommunity?server_token=TokenHere (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))"} syn

Environment

• EDR Console: All Supported Versions

Cause

SSL Inspection is enabled on the firewall/proxy

Resolution

 Add an exception for for the EDR traffic "threatintel.bit9.com"