CB PSC: Quarantine Status Changes During Upgrade

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Console endpoint status reports sensor is in quarantine
• Network connections are observed in the investigate page

Environment

• CB Defense PSC Web Console: All Versions
• CB Defense Sensor: All Versions
• Microsoft Windows: All Versions
• Apple MacOS: All Versions

Cause

During an upgrade the quarantine status may not persist due to the upgrade process

Resolution

• We recommend remediating any issues on the endpoint as soon as possible and prior to attempting a sensor upgrade
• If a sensor in quarantine has been upgraded and the console is reporting network connections; reset the status of the sensor by toggling the quarantine status off and then on again

Additional Information

A future release will change this behavior