CB Response: Unable to receive netconns through the event-forwarder with Windows sensor 6.1.2

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Unable to receive netconns through the event-forwarder with Windows sensor 6.1.2.

Environment

CB Response Server: 6.2.0 and previous 6.X versions
CB Response Sensor: Windows sensor 6.1.2+
Windows: All versions

Cause

On 6.1.2 agent there is a newer term for netconn at the back-end and the server under 6.2.2 cannot interpret it.

Resolution

Upgrade Response server to 6.2.2 and above versions.