EDR: The EDR server is trying to connect to external/malicious IP's over tcp/443
book
Article ID: 289191
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
The EDR server is trying to connect to external/malicious IP's over tcp/443
Environment
EDR Server 6.x and Higher
Cause
A web server has been installed on the EDR server.
Resolution
Remove web server if installed on the same EDR server.
Additional Information
The EDR server should remain dedicated to only EDR.
Feedback
thumb_up
Yes
thumb_down
No