EDR: Why Sensor Connects to EDR Server Directly?
Article ID: 290396
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Why sensor connects to EDR server directly even though it can make successful connection using forward proxy?
Environment
- EDR Server: All Supported Version
- EDR Sensor: All Supported Version
Resolution
Tamper detection events will be sent directly from the kernel driver to report possible tamper. They do not handle proxies.
Feedback
Yes
No
Powered by
