What happens to existing prevention profiles when enabling the "Host Insights" license?

tdemo-user9 — Wed, 22 Nov 2023 13:39:28 GMT

Hello

Does anybody know what happens to the configuration of existing prevention profiles when the "Host Insights" license is activated? The environment currently has several prevention profiles that have the "XDR Pro Endpoint capabilities" enabled. The settings for host insights will appear under that setting according to this deployment video: https://youtu.be/3Ei1pJQpBX8?feature=shared&t=63

Will enabling the host insights license automatically enable this functionality on all devices that have the XDR Pro Endpoint capability enabled? Or can we control the rollout of this functionality with more granularity? We would like to rollout in phases.

Kr,

Thomas

Re: What happens to existing prevention profiles when enabling the "Host Insights" license?

nsinghvirk — Thu, 23 Nov 2023 16:25:18 GMT

Hello @tdemo-user9

Thanks for reaching out on LiveCommunity!

Enablement of Host Insight capabilities are directly related to the profiles under which they are enabled. So if you enable host insight capability on a particular profile, it will be enforced on all those endpoints to which the profile is linked. If you have different profiles for different endpoint groups then you can control host insight capabilities to specific groups.

Please mark the response as "Accept as Solution" if it answers your query.

Regards.

topic What happens to existing prevention profiles when enabling the "Host Insights" license? in Cortex XDR Discussions

What happens to existing prevention profiles when enabling the "Host Insights" license?

Re: What happens to existing prevention profiles when enabling the "Host Insights" license?