From 93a74cd2d7cf516d344206e107d5122913e57f61 Mon Sep 17 00:00:00 2001
From: amirsc3 <42802974+amirsc3@users.noreply.github.com>
Date: Thu, 2 Apr 2020 15:25:18 +0300
Subject: [PATCH] Update troubleshoot-live-response.md

Adding notes to service dependency to help customers self-resolve common issues with live response
---
 .../microsoft-defender-atp/troubleshoot-live-response.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-live-response.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-live-response.md
index 8e21eddb4d..2501fffa63 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-live-response.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-live-response.md
@@ -52,5 +52,14 @@ If while trying to take an action during a live response session, you encounter
 4. Navigate to your TEMP folder.
 5. Run the action you wanted to take on the copied file.
 
+## Slow live response sessions or delays during initial connections
+Live response is leveraging MDATP sensor registration with WNS service in Windows. 
+If you are having connectivity issues with live response, please confirm the following:
+1. notify.windows.com is not blocked in your environment.
+2. WpnService (Windows Push Notifications System Service) is not disabled.
 
+Please refer to the articles below to fully understand the WpnService service behavior and requirements:
+https://docs.microsoft.com/en-us/windows/uwp/design/shell/tiles-and-notifications/windows-push-notification-services--wns--overview
+https://docs.microsoft.com/en-us/windows/uwp/design/shell/tiles-and-notifications/firewall-allowlist-config
+'Microsoft Push Notifications Service (MPNS) Public IP ranges' - https://www.microsoft.com/en-us/download/details.aspx?id=44535