PSC: Will Sensors start checking in again once CRL traffic is allowed?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

If an older Sensor (2.0.x.x-3.2.x.x) is upgraded to a newer Sensor (3.3.x.x and higher) where access to the CRL check URLs is required, and the CRL and OCSP URLs are not allowed through the firewall or proxy, will the Sensor start checking in again once that traffic is allowed, or will an uninstall/reinstall be required?

Environment

• PSC Console: All Versions
  • CB Defense
  • CB LiveOps
  • CB ThreatHunter
  • CB ThreatSight
• PSC Sensor: 3.2.x.x and Lower upgrading to 3.3.x.x and Higher
• Microsoft Windows: All Supported Versions

Resolution

Yes, the Sensor will start checking in again once the CRL and OCSP URLs are allowed. An uninstall/reinstall will not be required, but it may take up to 15 minutes after the changes to the firewall/proxy have been made for the Sensor to start checking in again and sending up the Event data from the period of time when it could not communicate with the Carbon Black Cloud.