What are the Sensor Bypass Reasons and Remediation Options?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What are the reasons a device goes into bypass mode, and what can be done to correct it?

Environment

• Carbon Black Cloud
• Linux: All Supported Versions
• MacOS: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

This information can be found in the Tech Docs.
 

Additional Information

• If reaching out to support please provide Sensor logs from impacted devices
• Double-quotes are not required around values, but can be used

  Example
  Both sensorStates:"UNSUPPORTED_OS" and sensorStates:UNSUPPORTED_OS work for searching

• Multiple values can be searched simultaneously

  Either of the below searches work to show any/all devices with one of the Sensor States where a reboot should be the first remediation step attempted.
  
  sensorStates:(DRIVER_INIT_REBOOT_REQUIRED OR DRIVER_LOAD_PENDING OR DRIVER_INIT_ERROR)
  
  OR
  
  sensorStates:DRIVER_INIT_REBOOT_REQUIRED OR sensorStates:DRIVER_LOAD_PENDING OR sensorStates:DRIVER_INIT_ERROR