Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Does the Sensor ever get automatically removed from the Console?
Environment
Carbon Black Cloud Console: All Versions
Resolution
Active Sensors that do not connect to the Console after 30 days will automatically move to an "Inactive" state. Unless the machine is a VDI, and both of the following options are enabled, the sensors should never be automatically removed from the Console.
In Endpoints>Sensor Options>Sensor Settings, the following options can be enabled:
Delete Sensors that have been deregistered for:
24 Hours
1 Week
2 Weeks
1 Month
Deregister VDI sensors that have been inactive for:
1 Hour
3 Hours
24 Hours
1 Week
In Enforce>Policies>"Policy">Sensor Settings, the "Auto-deregister VDI clone sensors that have been inactive for" can be enabled as well