Carbon Black Cloud: How to Toggle Sensor Bypass with the RepCLI Utility (Windows)
book
Article ID: 288878
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Enable and disable Bypass Mode locally on the Sensor
Environment
Carbon Black Cloud Sensor: 3.3.x.x and Higher
Microsoft Windows: All Supported Versions
Resolution
Log into the machine with a user account that matches the AD User or Group SID configured at the time of sensor install
Launch a Command Prompt
Change directory to C:\Program Files\Confer
cd C:\Program Files\Confer
Enter the following command to enable Bypass
repcli bypass 1
--If the command is successful, 'Sensor is in bypass mode' will print to the command line
Enter the following command to verify if Sensor is in Bypass mode. Scroll through the results to verify the "Sensor State" value. (Sensor State will be [Disabled] in Bypass Mode, [Enabled] if not.)
repcli status
Enter the following command to disable Bypass
repcli bypass 0
--If the command is successful, 'Sensor is fully enabled'; will print to the command line
Additional Information
Active Directory-based SID authentication is required to run the "repcli bypass 1|0" commands
If Bypass is enabled on the sensor locally, Bypass can still be disabled from the Console if the Sensor is connected