4.1 Sensor Showing Out of Date or Not Available for Signature Status

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Carbon Black Cloud sensor is showing "Out of Date" / "Outdated" and not updating after updating from a previous version (IE 3.9 or 4.0)
  
  
  Note that this 4.1 sensor is also showing the old signature version format (X.XX.XX.XXX -) as opposed to the new signature version format (YEARMONTHDAY.XXX - IE 20250911.038)
  
  
• Fresh installation of sensor version 4.1 is showing "Not Available" / "Local Scan disabled or version not yet reported"
  

Environment

• Carbon Black Cloud Sensor: 4.1 and Higher
• Microsoft Windows: All Supported Versions

Cause

Network/Firewall rules have not been adjusted to account for the Symantec STARgate platform that is now utilized in Carbon Black Cloud Windows 4.1.0 (and above) sensors. This was announced in the 4.1.0 release notes.

Resolution

1. Adjust any networking/ firewalls in the environment to allow traffic to the Symantec STARgate platform URLs
   • https://shasta-clt.symantec.com/stargateping shasta-clt.symantec.com/stargatestats
   • https://shasta-clt.symantec.com/disarm
   • https://liveupdate.symantec.com
   • https://liveupdate.symantec.com/ET
   • https://ent-stasta-rrs.symantec.com:
   • https://ent-shasta-rrs.symantec.com/mrclean
   • https://ent-shasta-rrs.symantec.com/ping/stargateping
   • https://ent-shasta-rrs.symantec.com/ping/stargatestats
   • https://ent-shasta-rrs.symantec.com/ping/disarm
     
     More information can be found in the Firewall Configuration Documentation
     
     
2. Confirm signature packs are now updating