Carbon Black Cloud: When a Sensor is Installed Offline, does the sensor have blocking capabilities?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

When a sensor is installed offline, can it perform any blocks?

Environment

• Endpoint Standard Sensor: All Versions
• Enterprise EDR Sensor: All Versions

Resolution

No, a sensor that was installed offline will be installed in bypass mode.  The sensor will only begin blocking after checking in for the first time to pull policy from the console.