Can the Symantec ATP or SEDR Scanner appliance connect to two seperate Managers?
search cancel

Can the Symantec ATP or SEDR Scanner appliance connect to two seperate Managers?

book

Article ID: 172340

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

You seek to know if the Symantec Endpoint Detection and Response (SEDR) Scanner appliance, Physical or VM, can be configured to send network data to two separate ATP or SEDR Manager appliances.

Resolution

The Scanner appliance role can only be configured to talk to a single Manager's IP address using the communication channel password provided during the bootstrap process. There are no option for fail over or high availability. If the ATP/SEDR Scanner loses contact with the Manager for more than 24 hours, it will need to be rebootstrapped. The Scanner will cache all data indefinitely, until it is reconnected to the Manager.