Carbon Black Cloud: "Upload all binary files..." for all policies can impact corporate network bandwidth / performance

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Corporate performance monitors detect a sudden surge of data connected to destination "conferdeploy.net".

 

Environment

• Carbon Black Cloud Console
• Carbon Black Cloud Sensors: All Supported Versions 

 

Cause

Turning on the "Upload all new binaries..." switch will immediately affect all policies to start uploading binaries which can surge to many GB of increased network usage.

Resolution

This is issue DSER-37980, a requested feature to first prompt the user for confirmation that this change can possibly impact network performance before continuing.