Checkpoint Linux Agent (EDR) capturing k8s version running on the server as OS version

Firewall_Head — Mon, 14 Oct 2024 10:44:19 GMT

Dear Checkmates,

Recently I came across an incident where cpla agent is logging the OS version of the server as the version ID of the Kubernetes cluster running on the server.

cpla agent version: 1.18.12

Observed OS version : 1.22.15 & 1.26.5 (k8s version)

Original OS version of the server : RHEL 7.9

Almost 300+ servers are showing this data on the Harmony web console, please let me know why this is happening and whether it can be fixed.

========

WR,

Re: Checkpoint Linux Agent (EDR) capturing k8s version running on the server as OS version

G_W_Albrecht — Mon, 14 Oct 2024 12:30:15 GMT

I would rather ask CP TAC !

topic Checkpoint Linux Agent (EDR) capturing k8s version running on the server as OS version in Endpoint

Checkpoint Linux Agent (EDR) capturing k8s version running on the server as OS version

Re: Checkpoint Linux Agent (EDR) capturing k8s version running on the server as OS version