Carbon Black Cloud: How to Turn Off Automatic Updates for Local Scanner Signature Files

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Provide steps to disable Automatic Signature Updates for all Sensors in a given Policy

Environment

• VMware Carbon Black (CB) Cloud Console: All Versions
  • Endpoint Standard (formerly CB Defense)
• Carbon Black Cloud Sensor: 2.0.1.x and Higher
• Microsoft Windows: All Supported Versions 

Resolution

1. Log into CB Cloud Console
2. Go to Enforce > Policies
3. Click on desired Policy name
4. Click on Local Scan tab
5. Locate the Signature Updates section
6. Select Disabled from Allow Signature Updates drop-down
7. Click Save button to save changes to Policy