Carbon Black Cloud: Sensor blocks without purchasing Endpoint Standard, no way to disable

Products

• Carbon Black Cloud Workload
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Container
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Prevention

Issue/Introduction

• Organization licensed for individual products or product bundles not including Endpoint Standard (was CB Defense)
• Applications get blocked when Sensor is in Active mode
• Blocks go away when Sensor is in Bypass mode
• Where available, event data in Console shows block was due to Cb Defense

Environment

• Carbon Black Cloud Console: All Versions
  • Audit & Remediation
  • Container
  • Enterprise EDR
  • Prevention
  • Workload

Cause

Endpoint Standard rules are enabled

Resolution

Open a case with Carbon Black Technical Support and provide

Dashboard URL (the URL used to log in)
Org Name
ORG_ID or ORG_KEY