Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What is the Limit for Concurrent Live Response Sessions?

Carbon Black Cloud: What is the Limit for Concurrent Live Response Sessions?

Environment

  • CBC Console: All Versions
  • CBC Sensor: 3.1.x.x and Higher
  • Microsoft Windows: All Supported Versions
  • Apple macOS: All Supported Versions

Question

How many simultaneous Live Response (LR) sessions can be open or active at one time?

Answer

100 LR sessions can be established at a single time.

Additional Notes

  • If multiple Live Response (LR) Admin users have an LR session with the same device, this will only count as one, as the Sensor only allows a single LR session to be opened at a time
    • All LR Admins connecting to the same machine during this time will be using the same session
  • LR Sessions where commands have been sent will timeout after 15 minutes and close automatically
  • LR Sessions where no commands have been sent will timeout after 30 minutes (DSER-14828)

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
488
Contributors