If all the endpoints are on the office internet at that time, is Broker VM required? If you wanted to control your traffic throughput then yes. BVM supports up to 10k endpoints and has caching feature wherein endpoints can get content updates from the BVM.
If we shut down or power off the BVM, what will happen?
Considering that you put the BVM as your Download Source.
The agents will try to connect to the BVM and since it is currently turned off, it will fail.
Once failed, it will go to the Cortex XDR cloud to get the updates.
... View more