App Control: Agent disrupts Microsoft Windows patching process

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Agent disrupts Microsoft Windows patching process
• Stopping App Control Agent services allowed patching process to complete
• No execution blocks events recorded by App Control Server/Console

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows : All Supported Versions

Cause

No cause identified at this time

Resolution

 

• As a workaround, follow the below steps to stop the agent services:

1.  Disable tamper protection on the agent
2.  Stop the agent services 

• In order to investigate further, please log a Support case with the agent performance logs