EDR: Does Proxy Setting Get Overwritten on Sensor Upgrade

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

If I have a custom proxy setting in my sensor configuration, will that be overwritten when upgrading the sensor?

Environment

• EDR Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Linux: All Supported Versions

Resolution

Method	Windows	Linux	Answer
Upgrading via Console	X	X	Proxy config setting will persist
Upgrading manually (via MSI)	X		Proxy config setting will persist
Upgrading manually (via sh)		X	Proxy config setting will be overwritten

Additional Information

WINDOWS

Windows will take configurations / settings found in the sensorsettings.ini file and write them to the registry. Default configurations will be updated with each upgrade. Custom configurations (like proxy) where no default value is present will persist unless:

1. Uninstalled
2. Deliberately overwritten with a new value from sensorsettings.ini

The above applies to MSI or console upgrades.

LINUX

Linux will take the sensorsettings.ini which comes packaged with the sensor archive and write it to:

/var/opt/carbonblack/response/

Upgrading from the console will preserve the settings. Upgrading manually via running the shell script which comes packaged with the sensor archive will overwrite the existing sensorsettings.ini in that directory, thereby overwriting any custom configurations.