Number of Concurrent Live Response Sessions on Carbon Black EDR Server

Issue

Can we increase the number of concurrent Live Response Sessions on our Carbon Black Response Server? 

Environment

VMware Carbon Black EDR

Resolution

The technical answer is yes.  However, Carbon Black does not recommend going over 10 concurrent Live Response sessions at one time.  

Live Response was never designed to manage a large number of devices at one time.  Going over the recommended number of concurrent sessions risks damaging the Server.  At the very least, going beyond the recommended number can severely decrease the overall performance of the Server.  

Production Engineering sets most of the Servers to allow 25 Live Response connections.  If the Customer is noticing that they are not able to have multiple sessions open without experiencing issues, they should try closing their old Live Response sessions before opening any new ones.