We have ServiceNow MID Servers in our environment, and periodic MID Server upgrades/patches are installed. During these upgrades, Carbon Black frequently blocks some of the files being deployed, which results in the MID Server going down. We then need to perform additional troubleshooting and coordinate with the Carbon Black team to review and approve the blocked files before the MID Server can be brought back online.
Could someone please help clarify the following:
- What types of files are downloaded and installed during a MID Server upgrade/patch?
- From which locations/directories are these files downloaded, extracted, and executed during the upgrade process?
- Which folders, file types, or processes should be considered for whitelisting in Carbon Black to prevent future upgrade failures?
- Are there any standard ServiceNow recommendations for antivirus/endpoint protection exclusions related to MID Server upgrades?
Any guidance and recommended Carbon Black exclusions would be greatly appreciated.
