View the operational status of any Cortex XDR agent that you manage.
Cortex XDR provides you with information about the XDR agent operational status on an endpoint and indicates whether the agent is protecting according to its predefined security policies and profiles. This can help you identify when the agent may suffer from a technical issue or misconfiguration that interferes with the agent’s protection capabilities or interaction with Cortex XDR and other applications.
The XDR agent reports the operational status as follows:
Protected: Indicates that the XDR agent is running as configured and did not report any exceptions to Cortex XDR.
Partially protected: Indicates that the XDR agent reported one or more exceptions to Cortex XDR.
Unprotected: Indicates the XDR agent is not enforcing protection on the endpoint.
Local Resource Impact: Indicates that the XDR agent machine resources currently available for use, are not enough for the agent to operate smoothly.
You can monitor the Cortex XDR agent Operational Status in → .
The operational status that the agent reports varies according to the exceptions reported by the XDR agent.
Status | Description |
---|---|
Protected | (Windows, Mac, and Linux) Indicates all protection modules are running as configured on the endpoint. |
Partially protected | Windows
Mac
Linux
|
Unprotected | Windows, Mac, and Linux:
|
Local Resource Impact | Windows, Mac, Linux
In addition to the status, either one of the following sub-statuses appear:
|
CautionStatus can have the following implications on the endpoint:
|