EDR: The EDR server is trying to connect to external/malicious IP's over tcp/443
search cancel

EDR: The EDR server is trying to connect to external/malicious IP's over tcp/443

book

Article ID: 289191

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

The EDR server is trying to connect to external/malicious IP's over tcp/443

Environment

EDR Server 6.x and Higher

Cause

A web server has been installed on the EDR server.

Resolution

Remove web server if installed on the same EDR server.

Additional Information

The EDR server should remain dedicated to only EDR.