EDR: Sensor not checking in behind firewall

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Sensor logs show communication HRESULT - 0x80cc006e or 0x80072F8F

Environment

• EDR (formerly Cb Response) Server: All Versions
• EDR Sensor: All Linux Versions
• Linux: All Supported Versions
• Microsoft Windows: All Supported Versions

Cause

The firewall configuration is preventing the sensor from contacting the sever.

Resolution

• Firewall configuration changes must be made to allow the sensor to communication with unaltered certificates including
  • The default sensor communication port, 443.
  • The IP address or FQDN of the back-end server

Additional Information

• If the sensor communication port has been changed in nginx, then that port will need to be opened instead of 443.