Carbon Black Cloud: Can Sensors be Upgraded While in Bypass?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

If the Sensor is in Bypass, can it still be upgraded?

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Resolution

Yes!

Additional Information

• Whether the update/upgrade is pushed out via the Carbon Black Cloud Console or via another method, the Sensor can be upgraded while in Bypass
• If an immediate update/upgrade is desired, the recommended course of action is to use a software management application to push the update out on demand
• The Sensor still checks into the Carbon Black Cloud every five minutes whether it is Active, in Bypass, or Quarantined
• If update is pushed out via the PSC Console, the Sensor will retrieve the hint to update on it's next check-in and a random time within the next 15m - 4h will be set
• It is best to ensure that such machines will remain powered on for at least the next 4 hours after an update is pushed via the PSC Console to avoid needing to push the update again