ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Can the Symantec ATP or SEDR Scanner appliance connect to two seperate Managers?

book

Article ID: 172340

calendar_today

Updated On:

Products

Endpoint Detection and Response Advanced Threat Protection Platform

Issue/Introduction

You seek to know if the Advanced Threat Protection (ATP) or Symantec Endpoint Detection and Response (SEDR) Scanner appliance, Physical or VM, can be configured to send network data to two separate ATP or SEDR Manager appliances.

Resolution

The Scanner appliance role can only be configured to talk to a single Manager's IP address using the communication channel password provided during the bootstrap process. There are no option for fail over or high availability. If the ATP/SEDR Scanner loses contact with the Manager for more than 24 hours, it will need to be rebootstrapped. The Scanner will cache all data indefinitely, until it is reconnected to the Manager.