Skip to main content
NOTICE: Support has moved to the Zscaler Customer Support portal. To access support, log into Zscaler MDR, click your user icon (top right), and select Support Portal.
Go to Zscaler MDR Documentation
Zscaler MDR Support

Will banned hashes continue to be banned after the sensor is disabled ?

  • Updated .

Issue

Will banned hashes continue to be banned after sensor service is stopped?  

Environment

VMware Carbon Black EDR (Response) w/ Process Banning Enabled 

Resolution

The sensor service needs to be running in order to ban processes that have been banned.

In other words, if the sensor has been disabled, banned hashes will not be terminated until the sensor service begins to run.