CB Defense: Unable to toggle protection on via sensor UI if bypass enabled from back-end

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Selecting the 'On' toggle for Protection via sensor UI immediately flips back to "Off"
• Bypass can only be removed from the web console

Environment

• CB Defense Sensor: 3.0 and Higher
• CB Defense Web Console: All Versions
• "Allow user to disable protection" selected in sensor policy
• Bypass enabled from the web console

Cause

By design, the sensor cannot be taken out of bypass from the endpoint if the bypass action was sent from the console

Resolution

Bypass must be disabled from the web console

Additional Information

• If the sensor is unable to check into the back-end for updates, contact Technical Support for a workaround
• DSEN-5579 is an unplanned future improvement to display a message to the end user about why the sensor cannot be taken out of bypass