Carbon Black Cloud: When a Sensor is Installed Offline, does the sensor have blocking capabilities?
book
Article ID: 289775
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
When a sensor is installed offline, can it perform any blocks?
Environment
Endpoint Standard Sensor: All Versions
Enterprise EDR Sensor: All Versions
Resolution
No, a sensor that was installed offline will be installed in bypass mode. The sensor will only begin blocking after checking in for the first time to pull policy from the console.