Configuring real-time communication

Advanced EDR communicates with the Cytomic platform in real time to retrieve the settings profiles configured for protected computers in the console. Therefore, only a few seconds pass between the time the administrator assigns a settings profile to a computer and the time it is applied.

Real-time communication between the protected computers and the Advanced EDR server requires that each computer keep a connection open at all times. However, in organizations where the number of open connections might have a negative impact on the performance of the installed proxy, it may be advisable to disable real-time communication. The same applies to those organizations where the traffic generated when simultaneously pushing configuration changes to a large number of computers might impact bandwidth usage.

Requirements for real-time communication

• Real-time communications are compatible with all operating systems supported by Cytomic, except Windows XP and Windows 2003.

• If a computer accesses the Internet through a corporate proxy, the HTTPS connections must not be manipulated. Many proxies use Man-in-the-Middle techniques to scan HTTPS connections or work as cache proxies. When that happens, real-time communications do not work.

Disabling real-time communication

• Click the Settings menu at the top of the console. Select Network settings from the side menu. Click the Add button or select an existing settings profile to edit it.

• In the Proxy section, click Advanced options. Clear the Enable real-time communication checkbox.

If you disable real-time communication, your computers will communicate with the Advanced EDR server every 15 minutes.