Device Configuration Carbon Black

Overview:

Carbon Black Cloud is a software as a service (SaaS) solution that provides next-generation anti-virus (NGAV), endpoint detection and response (EDR), advanced threat hunting, and vulnerability management within a single console using a single sensor.

Steps to add the Carbon Black (Cloud) support

Open

• Enter the name of the device.

• Enter the CCE IP.

• Now enter the generated API ID in Access ID/user name and API Secret Key in password/Secret Key section (Reference: Generate an API Key for Your Appliance (vmware.com)).

• Now in valid JSON Format in the last field enter config as e.g. { "host": "Value", "org_key": "1234abc" }

  • Note: Value of host can be one of mentioned below (Reference: https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#building-your-base-urls )

    • EAP01 - defense-eap01.conferdeploy.net

    • Prod 01 - dashboard.confer.net

    • Prod 02 - defense.conferdeploy.net

    • Prod 05 - defense-prod05.conferdeploy.net

    • Prod 06 - defense-eu.conferdeploy.net

    • Prod NRT - defense-prodnrt.conferdeploy.net

    • Prod Syd - defense-prodsyd.conferdeploy.net

• Click on the Save button.

 Verification:

In UI go to the System tab, we will check that we are seeing Carbon Black