Quarantine Status Not Reflecting in Console on Linux Endpoints

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• The device was placed into quarantine mode, but the console is not reflecting this status.
• Running repcli status locally on the endpoint confirms that quarantine is active

  Quarantine: Yes

Environment

• Carbon Black Cloud Sensor: 2.15.x - 2.16.2
• Linux: All Supported Versions

Cause

Under investigation in CRE-23752

Resolution

Workaround: Restart the sensor

From terminal:
systemctl restart cbagentd

From live response:
execfg systemctl restart cbagentd