Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Console endpoint status reports sensor is in quarantine
Network connections are observed in the investigate page
Environment
CB Defense PSC Web Console: All Versions
CB Defense Sensor: All Versions
Microsoft Windows: All Versions
Apple MacOS: All Versions
Cause
During an upgrade the quarantine status may not persist due to the upgrade process
Resolution
We recommend remediating any issues on the endpoint as soon as possible and prior to attempting a sensor upgrade
If a sensor in quarantine has been upgraded and the console is reporting network connections; reset the status of the sensor by toggling the quarantine status off and then on again