CB Protection: Agent traffic to the CDC shows Internet Explorer 6 in the user agent string

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Server not connecting to services.bit9.com (CDC)
• Web proxy logs showing:

services.bit9.com/dsservices/service.asmx,Not allowed to use this browser,Microsoft IE 6.0

 

Environment

• CB Protection Server: All Supported Versions
• Microsoft Windows: All Supported Versions

Cause

• Based on the environment settings, traffic could be blocked in a proxy due to the http user agent header using an unsupported browser version.
• The default http user agent header sent by the .NET SoapClient class is :
  • Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 4.0.30319.1)
  • Mozilla = Default Browser 4.0 = Version for Default Browser MSIE = Microsoft Internet Explore 6.0 = Version of Microsoft Internet Explorer Default Text = Web Service Client Protocol (Editable in web service) 4.0.30319.1 = Version of CLR (Editable in web service)

Resolution

This setting is not controlled by CB Protection; rather it relies on how Windows decides to handle the traffic.  Further information on this can be found with Microsoft.