Duration Advanced Threat Protection Scanner maintains data after communication loss with ATP Manager

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

You request to know how long an Advanced Threat Protection (ATP) scanner will maintain event data after losing communication with the ATP Manager

Resolution

The ATP Scanner will maintain the event data until communication with the ATP manager is reestablished.  After communication is reestablished, the Scanner will forward the event data to the ATP Manager.