EDR: The EDR server is trying to connect to external/malicious IP's over tcp/443
Article ID: 289191
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
The EDR server is trying to connect to external/malicious IP's over tcp/443
Environment
EDR Server 6.x and Higher
Cause
A web server has been installed on the EDR server.
Resolution
Remove web server if installed on the same EDR server.
Additional Information
The EDR server should remain dedicated to only EDR.
Feedback
Yes
No
Powered by
