Parks disaster-recovery VMs in a public-cloud region show Carbon Black Cloud sensors Offline. On-premises sensors are fine. The region's cloud security groups allow only management RDP and SSH and never listed CBC SaaS FQDNs. What should the administrator update?
Select an answer to reveal the explanation.
Short Explanation
A cloud security group is just a firewall with a different badge. If it never allows CBC's SaaS, DR sensors starve the same way an on-prem perimeter ACL would. Open those FQDNs on the SG — on-prem DFW and Access ranges will not punch the cloud allow list.
Full Explanation
When parks disaster-recovery VMs in a public-cloud region show Carbon Black Cloud sensors Offline while on-premises sensors are fine, and the region's cloud security groups allow only management RDP and SSH and never listed CBC SaaS FQDNs, update cloud security group and regional firewall allow lists for the documented Carbon Black Cloud sensor FQDNs and ports. Cloud SG restrictions that permit only admin protocols starve sensor check-in even when on-prem CBC is healthy. Opening documented CBC destinations restores civic DR endpoint telemetry. The on-premises NSX-T gateway firewall, because cloud sensors hairpin through the county Edge, fails by concept when regional cloud SGs never listed CBC FQDNs; on-prem gateway changes do not open cloud SG egress. Identity firewall groups on the on-premises Manager, so AD users carry CBC allow rules into the cloud region, fails by concept because IDFW groups do not open cloud security-group egress for CBC SaaS. Workspace ONE Access network ranges, which automatically open cloud security groups for sensors, fails by concept because Access network ranges do not reconfigure cloud SGs for CBC. Exam caveat: Offline CBC in one cloud region with tight SGs means update that region's SG/firewall for CBC SaaS—on-prem NSX, IDFW, or Access ranges are distractors. Operational check: allow CBC FQDNs/ports in the cloud SG and regional firewall, confirm DR sensors Online, align with on-prem allow lists, and record regional CBC egress requirements in the parks DR runbook for municipal continuity security.