> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles.md).

# Manage endpoint prevention profiles

You can manage the endpoint prevention profiles of your Cortex XDR agent endpoints in various ways, including editing, duplicating, and populating endpoint prevention policy rules.

After you create and customize your endpoint prevention profiles, you can manage them from the Prevention Profiles page as needed.

### View the prevention policy rules that use a specific prevention profile

Before you modify or delete a profile, you can check which policy rules, if any, use the profile.

From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, right-click the profile and select `View policy Rules`.

{% hint style="info" %}
Cortex XDR opens the `Prevention Policy Rules` page on a new tab. This page is filtered, and only displays the rules that use the profile that you selected.
{% endhint %}

### Edit, export, duplicate, or delete an endpoint prevention profile

#### Edit a profile:

{% stepper %}
{% step %}
From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, right-click the profile and select `Edit`.
{% endstep %}

{% step %}
Make your changes, and then click `Save`.
{% endstep %}
{% endstepper %}

#### Export a profile:

{% stepper %}
{% step %}
From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, right-click the profile and select `Export Profile`.
{% endstep %}

{% step %}
Click `Export`. The profile is downloaded to your computer.
{% endstep %}
{% endstepper %}

#### Duplicate a profile:

{% stepper %}
{% step %}
From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, right-click the prevention profile and select `Save as New`. A new profile is displayed, containing the values from the profile that you selected.
{% endstep %}

{% step %}
Edit the profile name and description, edit any values that you want to change, and then click `Create`.
{% endstep %}

{% step %}
Populate a new prevention policy rule with your new profile.
{% endstep %}
{% endstepper %}

#### Delete a profile:

{% stepper %}
{% step %}
If necessary, delete or detach any policy rules that use the profile before attempting to delete it.
{% endstep %}

{% step %}
From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, locate the profile that you want to remove. The profile's `Usage Count` cell must have a `0 (zero)` value.
{% endstep %}

{% step %}
Right-click the prevention profile and select `Delete`.
{% endstep %}

{% step %}
To confirm the deletion, click `Yes`.
{% endstep %}
{% endstepper %}

### Populate a new prevention policy rule with a prevention profile

{% stepper %}
{% step %}
From `Inventory` → `Endpoints` → `Policy Management` → `Prevention` → `Profiles`, right-click the profile and select `Create a new policy rule using this profile`.

{% hint style="info" %}
Cortex XDR automatically populates the `Platform` selection based on your profile configuration, and assigns the profile based on the profile type.
{% endhint %}
{% endstep %}

{% step %}
For `Policy Name`, enter a meaningful name, and optionally, add a description for the policy rule.
{% endstep %}

{% step %}
Assign any additional profiles that you want to apply to your policy rule, and click `Next`. A list of endpoints is displayed.
{% endstep %}

{% step %}
Select the target endpoints for the policy rule, or use the filters to define criteria for the policy rule to apply, and then click `Next`.
{% endstep %}

{% step %}
Review the policy rule summary, and then click `Done`.
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/protect-your-endpoints/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.