Cortex XDR agent protection after 90 days of inactive

B.Sasmito — Sat, 04 Jul 2026 13:49:49 GMT

Hello Everyone.

I need your opinion to this topic. What will happen to the agent protection for the endpoint after 3 months of inactive.

Correct me if im wrong. Cortex XDR agent will delete permanently from management console and database after default deletion which is 90 days.

if i enable all the module in day 1 for an endpoint, then after 90 days which is day 91, my agent in an endpoint can't connect to Cortex XDR platform anymore which leave it as "Zombie agent".

in this case, what happen to the all module, does the agent still have capabilities of enabled module before 90 days implemented within agent's local database or does the enabled module work via internet connection ? if so, what prevention the agent currently have within that state ?

Hope everyone can help me with this question, Thanks !

topic Cortex XDR agent protection after 90 days of inactive in Cortex XDR Discussions

Cortex XDR agent protection after 90 days of inactive