EDR: Sensors Running MacOS 12.x Experiencing Network Disconnects

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Network is disconnecting when running EDR sensor on MacOS with Ethernet

Environment

• EDR MacOS Sensor 3.7.x
• MacOS: 12.3 and Lower

Cause

MacOS issues when using multiple Network Extensions

Resolution

Apple has identified an issue with the handling of network packet filters and has identified a fix included in the MacOS 12.4 and 13.0 releases