topic Re: some of endpoints might be exposed to risk due to report-only policies in Cortex XDR Discussions

some of endpoints might be exposed to risk due to report-only policies

Rehaman.Syed — Mon, 18 Dec 2023 10:49:24 GMT

Dear Team,

While login my Organizational XDR Console, their is attention message display - Image added.

If you guys having answer Please share to me - Thanks

Re: some of endpoints might be exposed to risk due to report-only policies

jmazzeo — Mon, 18 Dec 2023 12:17:13 GMT

Hi @Rehaman.Syed, thanks for reaching us using the live community.

That is only a warning message to let you know that you have policies with modules activated which are NOT in blocking mode as an action. For XDR, not blocking is a risk.

If you click in the "View" link, the console will filter these policies with the "report only" (check the yellow warning icon) action in any of the modules, then you can review them and, if needed, change the action.

Example screen:

Please let me know if this info ansers your question.

Thanks

Re: some of endpoints might be exposed to risk due to report-only policies

tlmarques — Mon, 18 Dec 2023 18:15:35 GMT

i've the same problem....but in my case, i've solved the problem on policies, but the alert persist (during months)....i opened one case with support team today.