ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Duration Advanced Threat Protection Scanner maintains data after communication loss with ATP Manager
Article ID: 172127
Endpoint Detection and ResponseAdvanced Threat Protection Platform
You request to know how long an Advanced Threat Protection (ATP) scanner will maintain event data after losing communication with the ATP Manager
The ATP Scanner will maintain the event data until communication with the ATP manager is reestablished. After communication is reestablished, the Scanner will forward the event data to the ATP Manager.