QuestionQ240Verified/Sensor DeploymentCopy linkReport a problemAsk AstroTutorSave questionWhat occurs when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?ARFM sensors on Linux hosts only send detection information to the Falcon Console. Event processing is disabled.BRFM sensors on Linux hosts stop processing both events and detections. Sensors send basic status information to the Falcon Console.CRFM sensors on Linux hosts stop processing events and detections but continue to send log data into FalconDRFM sensors on Linux hosts continue to process events and detections for existing policies but cannot get policy updates from the Falcon ConsoleShow AnswerAnswerExplanationA Linux Falcon Sensor in Reduced Functionality Mode stops processing events and detections to avoid compatibility issues, while continuing to send basic heartbeat or status information to the Falcon Console indicating that the sensor is installed.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion