EDR: Why Sensor Connects to EDR Server Directly?
search cancel

EDR: Why Sensor Connects to EDR Server Directly?

book

Article ID: 290396

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Why sensor connects to EDR server directly even though it can make successful connection using forward proxy?

Environment

  • EDR Server: All Supported Version
  • EDR Sensor: All Supported Version

Resolution

Tamper detection events will be sent directly from the kernel driver to report possible tamper. They do not handle proxies.