Policy ranking changes result in unexpected policy changes for endpoints in preview pane
search cancel

Policy ranking changes result in unexpected policy changes for endpoints in preview pane

book

Article ID: 400235

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard Carbon Black Cloud Audit and Remediation Carbon Black Cloud Container Carbon Black Cloud Enterprise EDR Carbon Black Cloud Workload

Issue/Introduction

When moving a policy ranking and then previewing the change there are some policy changes suggested that will happen to unexpected endpoints that might be unrelated to the policy change.

Environment

  • Carbon Black Cloud Console: Current Version
  • Carbon Black Asset Groups

Cause

CBC sensor endpoints that have an "out of sync" policy status (grayed out) will show up in the preview pane when moving policy rankings. This can be used to correct those machines and get them back in sync by automatically updating their policy.

Resolution

This is expected behavior and the "out of sync" policy sensors can either be manually by moving their policy, or can be automatically moved as part of the policy ranking change.