Carbon Black Cloud: When a Sensor is Installed Offline, does the sensor have blocking capabilities?
search cancel

Carbon Black Cloud: When a Sensor is Installed Offline, does the sensor have blocking capabilities?

book

Article ID: 289775

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

When a sensor is installed offline, can it perform any blocks?

Environment

  • Endpoint Standard Sensor: All Versions
  • Enterprise EDR Sensor: All Versions

Resolution

No, a sensor that was installed offline will be installed in bypass mode.  The sensor will only begin blocking after checking in for the first time to pull policy from the console.