Exploits Protection interfering with browser launch

[bryton.yang]

Has anyone ever experienced an issue where, after installing the XDR agent on an endpoint (host), Microsoft Edge could no longer open?

Here’s the situation: one of our customers installed the agent, and afterward, their laptop was unable to launch Edge — it would freeze on a blank startup screen.

On-site, we found that disabling Browser Exploits Protection allowed Edge to open normally. According to the Support, adding Edge to the Exploits Protection exception list also resolves the issue.

However, the customer does not accept either workaround, as they want to understand why this issue only occurs on this specific laptop while other endpoints remain unaffected.

We plan to investigate further based on the relevant logs, but if anyone has encountered the similar case before, I'd appreciate your insights or experience sharing.

[eluis]

Hi @bryton.yang 

I believe PANW support already gave the right answer. 

The difference in behavior between different endpoints might be related to different XDR  Agent versions or CUs updates on the Agents. 

Might be different OS (not exactly same kernel) or something from the OS or different Edge browser version having a subtle different behavior that makes the agent suspect about the one being blocked. 

Might be that in the endpoint with issues Ms Defense is not disabled ? or any other antivirus so there are lateral effects 

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". 

Thank you.