- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-04-2026 06:49 AM
Hello Everyone.
I need your opinion to this topic. What will happen to the agent protection for the endpoint after 3 months of inactive.
Correct me if im wrong. Cortex XDR agent will delete permanently from management console and database after default deletion which is 90 days.
if i enable all the module in day 1 for an endpoint, then after 90 days which is day 91, my agent in an endpoint can't connect to Cortex XDR platform anymore which leave it as "Zombie agent".
in this case, what happen to the all module, does the agent still have capabilities of enabled module before 90 days implemented within agent's local database or does the enabled module work via internet connection ? if so, what prevention the agent currently have within that state ?
Hope everyone can help me with this question, Thanks !
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!

