What are the consequences of having the endpoint protection status: disabled in Cortex?

LuisEhate — Tue, 31 Aug 2021 09:24:12 GMT

Re: What are the consequences of having the endpoint protection status: disabled in Cortex?

yalonso — Tue, 31 Aug 2021 23:09:57 GMT

Hi LuisEhate,

It would be a good practice to ensure the endpoint security profiles are properly configured. For an unprotected operational status on Windows, Mac or Linux the causes could be :

-Behavioral threat protection and Malware protection are not running

-Exploit protection and malware protection are not running

-The content is unavailable.

You can find additional documentation on endpoint security profiles for Cortex XDR and Cortex XDR agent operational statuses on the URL links below:

Cortex XDR operational status

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/monitoring/monitor-agent-operational-status.html

Endpoint Security profiles

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/endpoint-security-profiles.html

topic What are the consequences of having the endpoint protection status: disabled in Cortex? in Cortex XDR Discussions

What are the consequences of having the endpoint protection status: disabled in Cortex?

Re: What are the consequences of having the endpoint protection status: disabled in Cortex?