Test Carbon Black Cloud Sensor Network Connectivity

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Test to confirm a client machine's ability to connect to the Carbon Black Cloud backend.

Environment

• Carbon Black Cloud Console: All versions
• Carbon Black Cloud Sensor: All supported versions
• Microsoft Windows: All supported versions

Resolution

Windows

Test Connection to the Sensor URL

Without connection to the sensor URL, the sensor will be unable to check-in.

NOTE: The example URL (dev-prod05.conferdeploy.net) is specific to Prod 05. For other environments see Configure a Firewall

1. Open a Powershell administrative prompt
2. Run command:

   Test-NetConnection -computername dev-prod05.conferdeploy.net -Port 443 -InformationLevel Detailed

3. Successful connection will show:

   TcpTestSucceeded : True

Test Connection to the Content Management URL

Without connection to the content management URL, the sensor is not fully operational or protected. This URL is the same for all backends

Via PowerShell

1. Open a PowerShell administrative prompt
2. Run command:

   Test-NetConnection -computername content.carbonblack.io -Port 443 -InformationLevel Detailed

3. Successful connection will show:

   TcpTestSucceeded : True

Via Live Response

1. Start a Live Response Session
2. Run command:

   execfg "c:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe" Test-NetConnection -computername content.carbonblack.io -Port 443 -InformationLevel Detailed

3. Successful connection will show:

   TcpTestSucceeded : True

Test Connection to the Signature URL

Only needed for the Endpoint Standard. Without connection to the Signature URL, the sensor will not be able to receive signature pack updates. This URL is the same for all backends.

Via PowerShell

1. Open a PowerShell administrative prompt
2. Run command:

   --For HTTPS
   Test-NetConnection -computername updates2.cdc.carbonblack.io -Port 443 -InformationLevel Detailed
   
   --For HTTP
   Test-NetConnection -computername updates2.cdc.carbonblack.io -Port 80 -InformationLevel Detailed

3. Successful connection will show:

   TcpTestSucceeded : True

Via Live Response

1. Start a Live Response Session
2. Run command:

   --For HTTPS
   execfg "c:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe" Test-NetConnection -computername updates2.cdc.carbonblack.io -Port 443 -InformationLevel Detailed
   
   For HTTP
   execfg "c:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe" Test-NetConnection -computername updates2.cdc.carbonblack.io -Port 80 -InformationLevel Detailed

3. Successful connection will show:

   TcpTestSucceeded : True

macOS

Test Connection to the Sensor URL (Example of a Prod05 URL)

Without connection to the sensor URL, the sensor will be unable to check-in.

NOTE: The example URL (dev-prod05.conferdeploy.net) is specific to Prod 05. For other environments see Configure a Firewall

Via Curl

1. Open terminal
2. Run command:

   curl https://dev-prod05.conferdeploy.net/services/healthCheck/

3. Successful connection will show:

   {"appStats":{"Commit":"HEAD","Build":"snapshot","Branch":"develop"},"message":"success","success":true}

Linux

Test Connection to the Sensor URL (Example of a Prod05 URL)

Without connection to the sensor URL, the sensor will be unable to check-in.

NOTE: The example URL (dev-prod05.conferdeploy.net) is specific to Prod 05. For other environments see Configure a Firewall

Via Curl

1. Open terminal
2. Run command:

   curl https://dev-prod05.conferdeploy.net/services/healthCheck/

3. Successful connection will show:

   {"appStats":{"Commit":"HEAD","Build":"snapshot","Branch":"develop"},"message":"success","success":true}