App Control: Functionality Loss When the Server is Isolated From the Internet
book
Article ID: 288848
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
What to expect when running the server environment is disconnected or has no internet access
Environment
App Control Server (formerly CB Protection): All Supported Versions
Resolution
Without opening an outbound connection to services.bit9.com (Cb Collective Defense Cloud) either directly or via a proxy, the following functionalities will not work:
Trust scores on hashes
Trust scores on publishers
Threat scores on hashes
Updated ATIs (Advanced Threat Indicators)
Updated Updaters and Rapid Configs
Updated System Health Indicators
Certificate revocation checks using external data sources
Otherwise the product will work normally.
Additional Information
App Control is not depending upon internet connectivity and works perfectly fine in network-isolated environments (as long as the agents and server can communicate); Enforcement, policies and software rules will still be able to function.
The server upgrade procedure does not change in an isolated environment.