Does the Sensor Get Automatically Removed?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Does the Sensor ever get automatically removed from the Console?

Environment

• Carbon Black Cloud Console: All Versions

Resolution

Active Sensors that do not connect to the Console after 30 days will automatically move to an "Inactive" state. Unless the machine is a VDI, and both of the following options are enabled, the sensors should never be automatically removed from the Console.

In Endpoints>Sensor Options>Sensor Settings, the following options can be enabled:

• Delete Sensors that have been deregistered for:
  • 24 Hours
  • 1 Week
  • 2 Weeks
  • 1 Month
• Deregister VDI sensors that have been inactive for:
  • 1 Hour
  • 3 Hours
  • 24 Hours
  • 1 Week

In Enforce>Policies>"Policy">Sensor Settings, the "Auto-deregister VDI clone sensors that have been inactive for" can be enabled as well