ATP can not receive EDR Recorder events because endpoints fail to authenticate

Products

• Endpoint Detection and Response

Issue/Introduction

ATP can not receive EDR Recorder events because endpoints fail to authenticate

Environment

ATP 3.2.0 Management Server or All-In-One

Resolution

Symantec Engineering committed to resolve this issue in a future build.

Until then, do one of the following:

• Disable EDR to prevent buildup of artifacts in trackdb, leading to UI outage, or
• Contact support for assistance with confirming the issue and applying a hotfix