How to disable and re-enable CBC network extension on MacOS

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Provide the commands to disable and re-enable CBC network extension on MacOS

Environment

• Carbon Black Cloud Sensor: 3.5.1.19 and Higher
• MacOS: 11.0 (Big Sur) and Higher

Resolution

• 3.7.1 and higher:

  • To disable, execute:

$ sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli networkextension <uninstall_code> disable

• To re-enable, execute:

$ sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli networkextension <uninstall_code> enable

• 3.5.19 through 3.6.2:
  • To disable, execute

    $ sudo /Applications/VMware\ Carbon\ Black\ Cloud/VMware\ CBCloud.app/Contents/MacOS/VMware\ CBCloud -nd

  • To re-enable, execute

    $ sudo /Applications/VMware\ Carbon\ Black\ Cloud/VMware\ CBCloud.app/Contents/MacOS/VMware\ CBCloud -ne

Additional Information

To view current configuration

• 3.7.1 and higher:

$ sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli networkextension <uninstall_code> status

• 3.5.19 through 3.6.2:

$ sudo /Applications/VMware\ Carbon\ Black\ Cloud/VMware\ CBCloud.app/Contents/MacOS/VMware\ CBCloud -ns