CB Defense: Slowness when transferring files using SMAFTAgent.exe

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• 3.3 sensors have extreme slowness when transferring files with SMAFTAgent
• File transfers work in Bypass mode

Environment

• CB Defense Console: .43.x
• CB Defense Sensor: 3.3.x

Cause

Hashing files in the 3.3.x sensor is slower - DSEN-2733. The way SMAFTAgent transfer files causes several hashes to be generated from the file.

Resolution

Upgrade to 3.4.0.1016 or higher