Cb Defense: How To Enable Background Scan Per Policy

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Provides steps for turning on background scanning for all Sensors in a given Policy

Environment

• Cb Defense PSC Console: All Versions
• Cb Defense Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Resolution

1. Go to Enforce > Policies
2. Select the desired Policy
3. Go to the Sensor tab
4. Check the 'Run background scan' option
5. Select either 'Standard' or 'Expedited' scanning options

   Select a background scan to run a one-time scan of online endpoints
   Standard (3-5 days) Recommended as a default
   Expedited (24 hours) Recommended for testing and emergency incidents
        System performance will be affected due to increased use of endpoint resources (CPU, memory, disk IO)
        Applies to Windows sensors version 3.3 and later

6. Click 'Save' for the Policy changes to take effect

Additional Information

• Only one background scan will run per installation of the Cb Defense Sensor
• Changing the type of background scan (Standard, Expedited) will not start a new scan