CB PSC: Remote Login Black Screen if McAfee Endpoint Security Threat Prevention is installed

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Remote Login Black Screen if McAfee Endpoint Security Threat Prevention is installed
• Occasionally the black screen is not exhibited and event viewer, services, mmcs wont open
• Issue is intermittent
• Only full Sensor Bypass resolves the issue

Environment

• CB Defense PSC Console: All Versions
• CB Defense PSC Sensor: 3.4.0.1047, 3.4.0.1052 
• Microsoft Windows: All Supported Versions

Cause

• McAfee Endpoint Security Threat Prevention did not have exclusions for the PSC directory C:\Program Files\Confer
• There were a number of performance issues in Sensor 3.4 which were resolved with 3.4.0.1070

Resolution

• Create exclusions for McAfee Endpoint Security Threat Prevention did not have exclusions for the PSC directory C:\Program Files\Confer
• Upgrade to Sensor 3.4.0.1070