EDR Connection status in SEP client GUI shows "Not Authenticated"

book

Article ID: 169745

calendar_today

Updated On:

Products

Endpoint Detection and Response Advanced Threat Protection Platform

Issue/Introduction

You have configured the Endpoint Protection clients to send data and file reputation queries to SEDR Appliance.

When you review the Troubleshooting section of SEP, the EDR Connection status shows "Not Authenticated."

Cause

The authentication referred to in this troubleshooting window is the ECC 2.0 functionality that SEP and SEDR establish when the SEPM controller setting is configured.

Resolution

This status indicates the current state of the Enrollment Process of ECC 2.0 and SEDR Appliance. If the client is unable to Enroll, you will need to troubleshoot that process. Please see the following document:

SEP clients stuck in "Authentication Pending" in the Enrollment Statistics during ECC client registration
https://knowledge.broadcom.com/external/article?articleId=171884

Attachments