For antivirus-only installations of ATP, network events are not collected
Last Updated December 12, 2018
A customer configures EDR 2 with a custom SEP client installation for AV only (disabling all features except for 'Virus, Spyware, and Basic Download'). The customer also enables the endpoint data recorder through ATP Manager.
Since a necessary component is not installed in an AV-only installation, network events are not captured as part of endpoint recording data.
This is for informational purposes for this type of installation configuration.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe