Carbon Black Cloud: Is there a Sensor where Windows Offloaded Data Transfer (ODX) is supported?

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Can Offloaded Data Transfer (ODX) be used on Server 2012/2012 R2 be used with a Carbon Black Cloud Sensor without interop issues?

Environment

• Carbon Black Cloud Sensor: All Versions
  • Audit & Remediation (was CB LiveOps)
  • Endpoint Standard (was CB Defense)
  • Enterprise EDR (was CB ThreatHunter)
• Microsoft Windows: Server 2012, Server 2012 R2
• Offloaded Data Transfer (ODX) enabled/deployed

Resolution

Yes. The 3.6.0.x Sensors and higher are compatible with ODX. 3.5.0.x and earlier Sensors were not/are not compatible with ODX and may require Permissions rules to be configured to avoid interoperability issues.