CB Defense: Interoperability Issue With Genetec Video Player

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Bypass Permission rules are in place for Genetec directory
• Genetec video player crashes 
• Issue is resolved with Sensor in bypass

Environment

• CB Defense PSC Console: All versions
• CB Defense PSC Sensor: 3.4.0.887 and lower
• Microsoft Windows: All supported versions

Cause

There is a known interoperability issue with the Sensor and the Genetec video player

Resolution

1. Upgrade Sensor to 3.4.0.1016 or higher
2. Create an API Bypass rule for the Genetec executable

Example (Use full path to executable with minimal wildcards)

Application at path | *:\Users\*\Desktop\Genetec\GenetecVideoPlayer.exe
Performs any API operation
Bypass

 

Additional Information

• Sensor versions previous to 3.4.0.1016 may still cause Genetec video player crashes with the API or Full Bypass Permissions in place
• The Genetec video player is a portable executable that does not require install or registration with Windows; ensure the path used in the rule matches the location of the executable