Endpoint Standard: In Quarantine Mode, can certain connections be allowed?
book
Article ID: 288679
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Can custom connections be allowed while the sensor is in Quarantine?
Environment
Carbon Black Cloud Console: All Versions
Endpoint Standard Sensor: All Versions
Microsoft Windows: All Supported Versions
Apple macOS: All Supported Versions
Resolution
No, not at this time.
Additional Information
At this time, it's not possible to customize what types of connections are allowed/disallowed during Quarantine; For example, based on a specific port, protocol, IP address, hostname, etc. The only type of connection that will be allowed during Quarantine mode is from Cb Defense Sensor to Cb Defense Cloud.
If you wish to be able to customize Quarantine mode, please submit your use-case via Idea Central