To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Endpoint Detection & Response - Advanced Response

Options
Sauron
Sauron W/ Member Posts: 2 Security Scout

What are the limits of maximum assets to run response jobs?
Have people experience on this module with large volume of jobs?
Im running quite a few jobs now, but are experiencing "hanging" of jobs. Started out fine, but it has been running without updates 15 hours now.

Answers

  • Sethu Laks
    Sethu Laks W/ Partner, W/ Staff, W/ Moderator Posts: 245 Moderator
    edited June 2023
    Options

    Hi @Sauron

    Thank you for reaching out to our WithSecure Community.

    We appreciate your feedback and questions regarding the performance of our Advanced Response Stack, and we want to assure you that it is a focus area on our roadmap.

    We have identified this as a pain point for our customers, and we are committed to improving its performance. However, based on your scenario, it seems like you would like to contact our WithSecure support team so that we can obtain job IDs and fsdiags in order to analyze what exactly went wrong.

    Please feel free to reach out to us anytime if there's anything else we can assist with. Thank you for being a valued member of the WithSecure community.

    Best Regards

    Sethu

  • Sauron
    Sauron W/ Member Posts: 2 Security Scout
    Options

    Hi again,

    Updates on this.

    This was done in a closed environment with connections through proxy.f-secure.com.
    It seems that parts of the response module didn't use connections through this proxy. Therefore we tested with the f-secure connection check tool to verify the problem. After that the response module worked as expected with no significant delays.

  • JamesC
    JamesC W/ Partner, W/ Staff, W/ Moderator Posts: 521 Moderator
    edited August 2023
    Options

    Hi @Sauron ,

    Thank you for sharing with us the update, and I am glad to hear the issue is resolved.

This discussion has been closed.