Endpoint Detection & Response - Advanced Response

Sauron

What are the limits of maximum assets to run response jobs?
Have people experience on this module with large volume of jobs?
Im running quite a few jobs now, but are experiencing "hanging" of jobs. Started out fine, but it has been running without updates 15 hours now.

Sethu Laks

Hi @Sauron

Thank you for reaching out to our WithSecure Community.

We appreciate your feedback and questions regarding the performance of our Advanced Response Stack, and we want to assure you that it is a focus area on our roadmap.

We have identified this as a pain point for our customers, and we are committed to improving its performance. However, based on your scenario, it seems like you would like to contact our WithSecure support team so that we can obtain job IDs and fsdiags in order to analyze what exactly went wrong.

Please feel free to reach out to us anytime if there's anything else we can assist with. Thank you for being a valued member of the WithSecure community.

Best Regards

Sethu

Sauron

Hi again,

Updates on this.

This was done in a closed environment with connections through proxy.f-secure.com.
It seems that parts of the response module didn't use connections through this proxy. Therefore we tested with the f-secure connection check tool to verify the problem. After that the response module worked as expected with no significant delays.

JamesC

Hi @Sauron ,

Thank you for sharing with us the update, and I am glad to hear the issue is resolved.