EDR: Sensor reporting incorrect version after upgrade
search cancel

EDR: Sensor reporting incorrect version after upgrade

book

Article ID: 292298

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • The sensor was upgraded, but the Add/Remove programs and Services still show the old sensor version
  • When sensor was first upgraded, it shows the new version in the UI, but eventually reverts to the old version

Environment

  • EDR Server: All Versions
  • EDR Sensor: 7.2.1 and Higher
  • Upgrade deployed manually, not through the console

Cause

The sensor group is configured to automatically 'upgrade' the sensor to a specific version. If the sensor is upgraded to a newer version, it will automatically downgrade the next time it checks in. 

Resolution

If upgrades are handled through a service other than the UI, sensor group settings should no perform automatic upgrades
  1. From the console, go to the Sensors page (monitor icon)
  2. Select the policy the sensor is in and Edit
  3. Under "Upgrade Policy" check the "No automatic upgrades." radio button
  4. Save changes
  5. Upgrade the sensor through preferred method

Additional Information

There was an issue that reported incorrect versions in Add/Remove programs which was fixed in 7.2.1 - CB-34517