Endpoint Standard: Sensor reverts to old signature

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Sensors are updating to current av signature but reverting to a single older version after 2 hours

Environment

• Endpoint Standard (formerly CB Defense): All supported versions
• Local Mirror: All supported versions
• Microsoft Windows: All supported versions

Cause

A mirror has been deployed but has stopped receiving updates.  If the sensor is unable to access the mirror it will update from the cloud but once the mirror becomes available it will revert to the most recent signature on the mirror which will be from the last time the mirror successfully updated. 

Resolution

Resolve mirror issues.