Which SSL/TLS and Cipher Suites Does the Sensor Use?

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

This article provides the location of the Cryptographic Protocol Requirements for the Carbon Black Cloud backend. This includes information on TLS configurations and supported Cipher Suites.

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Supported Versions

Resolution

Communication between the Carbon Black Cloud Sensor and the backend is governed by the host Operating System's Schannel configurations. The sensor does not have a hardcoded TLS or Cipher Suite list.Connection success depends on your OS being configured to support a protocol that is also supported by our backend. During the handshake, the console will automatically select the most secure mutually supported option. See Cryptographic Protocol Requirements for an list of the TLS and Cipher Suites enabled on the backend.