What are the consequences of having the endpoint protection status: disabled in Cortex?

[yalonso]

Hi LuisEhate,

It would be a good practice to ensure the endpoint security profiles are properly configured. For an unprotected operational status on Windows, Mac or Linux the causes could be :

-Behavioral threat protection and Malware protection are not running

-Exploit protection and malware protection are not running

-The content is unavailable.

You can find additional documentation on endpoint security profiles for Cortex XDR and Cortex XDR agent operational statuses on the URL links below:

Cortex XDR operational status

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/monitoring/monitor-agent-op...

Endpoint Security profiles

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/endpoint-...