App Control: Functionality Loss When the Server is Isolated From the Internet

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What to expect when running the server environment is disconnected or has no internet access

Environment

• App Control Server (formerly CB Protection): All Supported Versions

Resolution

 Without opening an outbound connection to services.bit9.com (Cb Collective Defense Cloud) either directly or via a proxy,  the following functionalities will not work:

• Trust scores on hashes
• Trust scores on publishers
• Threat scores on hashes
• Updated ATIs (Advanced Threat Indicators)
• Updated Updaters and Rapid Configs
• Updated System Health Indicators
• Certificate revocation checks using external data sources

Otherwise the product will work normally.

Additional Information

• App Control is not depending upon internet connectivity and works perfectly fine in network-isolated environments (as long as the agents and server can communicate); Enforcement, policies and software rules will still be able to function.
• The server upgrade procedure does not change in an isolated environment.