Carbon Black Sensor 4.1.0 does not honor the local scan policy configuration

Products

• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Endpoint Standard

Issue/Introduction

Carbon Black Sensor 4.1.0 will not honor the local scan configuration Update servers' settings and will attempt to download signatures from liveupdate.symantec.com URL.

In bandwidth restricted environments where the sensor is shipped updated with the latest local scanner signatures, this may cause huge bandwidth utilization in the configured machines pool which is considered unacceptable in some scenarios.

 

Environment

Carbon Black Sensor 4.1.0

Resolution

This defect is fixed in future sensor releases 4.2.x

Contact support to implement a workaround or rollback the sensor to versions prior to 4.1.0

Additional Information

Defect CRE-22668