Scanner Definition Host and Ports

Requirement	Details	Notes
Carbon Black Definition Server http://updates.cdc.carbonblack.io/update Uses HTTP Port 80	This connection is used to update local scanner definition files. This is only required if local scanning is enabled for the sensor.	This can be configured to update from a locally hosted server. If you mirror the definition server to an internal server, you can use port 80 or other HTTP port.

Local Scan Settings are not supported by macOS or Linux sensors.

For large enterprises, we recommend the following best practices:

• Perform an initial installation of AV Signature Pack together with the sensor.
• Roll out the initial AV Signature Pack download in small batches to avoid network saturation.
• Mirror signature updates on a local server.

  See the Signiature Mirror Instructions in the Sensor Installation Guide.