App Control: HTTP 403 Forbidden error when trying to access the console

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• After installation of CB Protection Server, the console page loads with the error:

403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.

• If you add /login.php to the end of the https://<servername>, the page successfully loads, so its the redirection that is failing.
• https://<servername>/hostpkg page is also failing to load with a 403 error

Environment

• App Control Server: 8.0.0 and Higher
• Microsoft Windows: All Supported Versions

Cause

The IIS configuration failed to set the default document for the website, so only explicitly searched pages will load and redirects from the default document will fail.

Resolution

1. Verify that IP and Domain restrictions are either not enabled, or configured correctly https://community.carbonblack.com/t5/Knowledge-Base/App-Control-Checking-for-IP-and-Domain-Restrictions/ta-p/62775
2. On the App Control Server open the IIS Management console
3. Click on Parity Website
4. Click on the Configuration Editor in the center pane
5. Click on 'system.Webserver' in the drop down
6. Select 'Default Document' > Change value to 'True'