ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Duration Advanced Threat Protection Scanner maintains data after communication loss with ATP Manager


Article ID: 172127


Updated On:


Endpoint Detection and Response Advanced Threat Protection Platform


You request to know how long an Advanced Threat Protection (ATP) scanner will maintain event data after losing communication with the ATP Manager


The ATP Scanner will maintain the event data until communication with the ATP manager is reestablished.  After communication is reestablished, the Scanner will forward the event data to the ATP Manager.