You can view the reason an asset goes into a bypass mode in the Carbon Black Cloud console.

The following table lists reasons for an asset to go in a bypass mode, and the remediation actions that you can perform. You can use a search value associated with a bypass reason to filter assets matching the bypass reason.

Search value of the bypass reason Display value of the bypass reason Description Action to resolve bypass
sensorStates:"CSR_ACTION" Bypass (Admin action) The Carbon Black Cloud console instructs the sensor to go into a bypass mode.

Relates to sensors supporting Windows, Linux, and macOS.

 Use the Carbon Black Cloud console or a local action to remove the sensor from the bypass state.
sensorStates:"REPUX_ACTION" Bypass (Local action) A local action instructs the sensor to enter bypass mode. For example, enable bypass locally on the sensor:
  • By elevating a command prompt and executing the command "C:\Program Files\Confer\Uninstall.exe" /bypass 1 <UninstallCode>
  • By logging into the asset with credentials configured at sensor installation, launching a command prompt, and executing the command repcli bypass 1 from the C:\Program Files\Confer directory .
  • By using the policy setting Allow user to disable protection. For more about this setting, see Sensor Policy Settings in the User Guide.
  • By executing the command for installing the sensor with the option bypass=1.

Relates to sensors supporting Windows and macOS.

 Use the Carbon Black Cloud console or a local action to remove the sensor from the bypass state.
  • sensorStates:"UNSUPPORTED_OS" OR
  • sensorStates:”OS_VERSION_MISMATCH”
 Error (Unsupported OS) The installed sensor does not support the operating system.

Relates to sensors supporting macOS and Linux.

 Upgrade the sensor or the operating system to a supported version. For information on the sensor operating environment requirements, see the applicable Operating Environment Requirements (OER).
  • sensorStates:"DRIVER_LOAD_NOT_GRANTED AND
  • sensorStates:"DRIVER_USERSPACE
 Error (System ext. not approved) The Carbon Black Cloud macOS sensor's System Extension is not approved.

Relates to sensors supporting macOS.

 Approve the System Extension that the sensor utilizes. See Approving the System Extension and Network Extension for macOS 11+ in the Sensor Installation guide.
  • sensorStates:"DRIVER_LOAD_NOT_GRANTED" AND
  • sensorStates:"DRIVER_KERNEL"
 Error (Kernel ext. not approved) The Carbon Black Cloud macOS sensor requires a Kernel Extension approval, regardless of the previous Kernel Extension approval status.

Relates to sensors supporting macOS.

 Approve the Kernel Extension. See Approve the Kernel Extension (macOS 10.13 – macOS 11) in the Sensor Installation Guide.
sensorStates:"REMGR_INIT_ERROR" Error. Contact Broadcom Carbon Black Support) The sensor cannot connect to the event_collector.

Relates to sensors supporting Linux.

Check that the Linux distribution is supported. For version compatibility, see Carbon Black Cloud Linux Sensor Operating Environment Requirements.

If the distribution is supported, contact Carbon Black Support.
sensorStates:"KERNEL_HEADERS_NOT_INSTALLED" Error (Missing kernel headers) The sensor's Extended Berkeley Packet Filter (eBPF) probe cannot load because the Linux kernel headers, matching the running kernel version, are not installed. Also, the sensor might be running an unsupported OS Kernel version.

Relates to sensors supporting Linux.

 Verify that the kernel headers are installed. See Linux Kernel Requirements for Linux Sensor Versions 2.10+ in the Sensor Installation Guide.

For version compatibility, see Carbon Black Cloud Linux Sensor Operating Environment Requirements.
sensorStates:”DRIVER_INIT_REBOOT_REQUIRED” Error (Reboot required) The asset requires a reboot to initialize the driver.

Relates to sensors supporting macOS.

 If a reboot does not resolve this issue, contact Broadcom Carbon Black Support.
sensorStates:” DRIVER_LOAD_PENDING” Error (Extension load pending) Loading extension is pending.

Relates to sensors supporting macOS.

 If a reboot does not resolve this issue, contact Broadcom Carbon Black Support.
sensorStates:"DRIVER_INIT_ERROR" Error (Extension Error) Driver fails to load properly.

Relates to sensors supporting Windows, macOS, and Linux.

 If a reboot does not resolve this issue, contact Broadcom Carbon Black Support.
sensorStates:"SENSOR_UPGRADE_IN_PROGRESS" Error (Update in progress) The sensor is being updated on the asset.

Relates to sensors supporting Windows.

 Resolves immediately after the sensor update completes.
N/A Bypass (Contact Broadcom Carbon Black Support) Device is in bypass for an unknown reason. Contact Broadcom Carbon Black Support for assistance.