Carbon Black Cloud: When should a device be placed in Bypass?
book
Article ID: 292590
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
When should a device be placed in Bypass?
Environment
Carbon Black Cloud Web Console: All Versions
Carbon Black Cloud Sensor: All Versions
Microsoft Windows: All Versions
Apple MacOS: All Versions
Resolution
To confirm if the Carbon Black Cloud Sensor is causing any application interoperability, bootup, or login issues on the end device, sensor bypass can be enabled as this will disable all policy enforcement on the device
If performing and OS upgrade, it is recommended that the device be placed into bypass prior to upgrade. See the following KBs:
If bypass resolves the issue, please "Disable Bypass" to resume policy enforcement and configure application specific permission rules which will allow the affected device and/or application to resume normal functionality