Operational Defect Database
BugZero found this defect 443 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
WatchGuard Technologies | kA16S000000BcZXSA0
Invalid risk in EDR Core (Advanced protection for Windows disabled or in 'Audit’ mode)
Last update date:
3/3/2023
Affected products:
WatchGuard Cloud
WatchGuard Endpoint Security
Affected releases:
All
WatchGuard Cloud
WatchGuard Endpoint Security
Fixed releases:
All
Description:
Issue
Advanced Protection in WatchGuard Endpoint Security is not available for WatchGuard EDR Core. The Endpoint Security management UI might show an invalid risk (Advanced protection for Windows disabled or in 'Audit' mode) for an endpoint with EDR Core.
Workaround/Solution
You can ignore the Advanced protection for Windows disabled or in 'Audit' mode risk. To prevent future detections, disable the risk.To disable the risk for the affected account, in WatchGuard Cloud: Select Configure > Endpoints.Select Settings > Risks.Disable the Advanced protection for Windows disabled or in Audit mode toggle.Click Save. Note: For more information about WatchGuard Endpoint Security risk assessment, go to Risk Assessment in WatchGuard Endpoint Security in Help Center.
