search cancel

ATP can not receive EDR Recorder events because endpoints fail to authenticate

book

Article ID: 173162

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

ATP can not receive EDR Recorder events because endpoints fail to authenticate

Environment

ATP 3.2.0 Management Server or All-In-One

Resolution

Symantec Engineering committed to resolve this issue in a future build.

Until then, do one of the following:

  • Disable EDR to prevent buildup of artifacts in trackdb, leading to UI outage, or
  • Contact support for assistance with confirming the issue and applying a hotfix