Will Signature packs still update if rules are disabled?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When rules are disabled does that prevent Signature packs from updating on sensors?

Environment

• Carbon Black Cloud

Resolution

Yes. When the sensor is disabled, it will by default, disable sensor-specific features as well. These items include:

• Avira scanning and signature updates
• Canary file deployment
• Background scan
• WSC integration