Azure ATP Sensor - Update Process Large Number of Domain Controllers

Brass Contributor

Hello, this question may have already been asked/answered but I have not been able to find a previous thread.

I have a customer with a large number of domain controllers (over 1000).  The DCs are located in branch office locations as well in data centers.  The customer is currently evaluating moving from ATA to ATP.  

I understand there are two update update options for the Sensor, Immediate and Delayed.
We are concerned with hundreds of domain controllers attempting to download/install updates at the same time.

 

Are there any other sensor update configuration options such as creating collections of servers?  Another thought we had was to disable the automatic update and use another mechanism (SCCM) for deploying the updates more granular.   We were also wondering if there is a way to schedule the upgrade time period?

Does any one else in the Tech Community have experience with ATP in a large ADDS count environment?

 

Thanks!

1 Reply

@Bryan Bishop , delay is the only option, there is currently no way to do groups or update circles.

Also no option on timing an update or using SCCM, as that would require you to uninstall and reinstall, which will be much harder to implement correctly.

We have other customers with a similar numbers of DCs , the download timing was never raised as an issue.