> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints.md). # Protect your endpoints - [Endpoint security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security.md): Learn how Cortex XSIAM and the Cortex XDR agent protect your endpoints. - [Endpoint protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection.md): Learn how Cortex XSIAM endpoint protection uses the Cortex XDR agent to prevent malware, exploits, and zero-day threats. - [Malware protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/malware-protection.md): Learn how Cortex XSIAM prevents known and unknown malware across supported endpoint platforms. - [Exploit protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/exploit-protection.md): Learn how Cortex XSIAM prevents software exploits across the endpoint attack chain. - [File analysis and protection flow](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/file-analysis-and-protection-flow.md): Understand Cortex XSIAM file analysis and the Cortex XDR agent exploit and malware protection flow. - [Endpoint protection capabilities](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/endpoint-protection-capabilities.md): Explore Cortex XSIAM endpoint protection capabilities and their supported platforms. - [Processes protected by exploit security policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/processes-protected-by-exploit-security-policy.md): Review processes protected by Cortex XSIAM exploit security policies on each operating system. - [File Integrity Monitoring (FIM)](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/file-integrity-monitoring-fim.md): Use Cortex XSIAM File Integrity Monitoring to detect changes to endpoint files and folders. - [CaaS Workloads](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/caas-workloads.md): Deploy the Cortex XSIAM container-embedded agent to protect CaaS workloads. - [WildFire analysis concepts](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/wildfire-analysis-concepts.md): Learn how Cortex XSIAM and WildFire analyze unknown files, assign malware verdicts, and protect endpoints. - [Guidelines for keeping Cortex XDR agents and content updated](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/guidelines-for-keeping-cortex-xdr-agents-and-content-updated.md): Plan phased Cortex XDR agent and content updates to maintain endpoint protection in Cortex XSIAM. - [About content updates](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/about-content-updates.md): Learn how content updates deliver current endpoint protections and detection logic in Cortex XSIAM. - [Endpoint data collection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/endpoint-protection/endpoint-data-collection.md): Understand endpoint data that Cortex XSIAM collects through the Cortex XDR agent. - [Install and manage endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints.md): Learn how Cortex XSIAM installs, configures, hardens, and manages Cortex XDR agents and endpoint protection. - [Set up endpoint protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection.md): Set up Cortex XSIAM endpoint protection with profiles, policies, and exception rules. - [Set up endpoint profiles and exception rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules.md): Configure Cortex XSIAM endpoint profiles and exception rules for consistent protection. - [Set up malware prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-malware-prevention-profiles.md): Configure Cortex XSIAM malware prevention profiles to detect and block malicious files. - [Set up exploit prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exploit-prevention-profiles.md): Configure Cortex XSIAM exploit prevention profiles to protect endpoints from software exploits. - [Set up agent settings profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-agent-settings-profiles.md): Configure Cortex XDR agent settings profiles for endpoint communication, upgrades, and protection behavior in Cortex XSIAM. - [Set up restrictions prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-restrictions-prevention-profiles.md): Configure restrictions prevention profiles to control executable activity on endpoints in Cortex XSIAM. - [Set up exception profiles and rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules.md): Configure exception profiles and rules for trusted or unsupported activity in Cortex XSIAM. - [Exception configuration](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/exception-configuration.md): Configure endpoint exception settings and policy behavior in Cortex XSIAM. - [Issue exclusions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions.md): Manage issue exclusions to suppress selected endpoint security issues in Cortex XSIAM. - [Add an issue exclusion rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/issue-exclusions/add-an-issue-exclusion-rule.md): Create issue exclusion rules for matching endpoint security issues in Cortex XSIAM. - [Add an IOC or BIOC rule exception](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-an-ioc-or-bioc-rule-exception.md): Add Cortex XSIAM IOC or BIOC rule exceptions for approved endpoint activity. - [Add a disable prevention rule for endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-prevention-rule-for-endpoints.md): Add Cortex XSIAM rules that disable prevention on selected endpoints. - [Add a disable injection and prevention rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-disable-injection-and-prevention-rule.md): Add Cortex XSIAM rules that disable injection and prevention for selected processes. - [Add a support exception rule for endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-support-exception-rule-for-endpoints.md): Add Cortex XSIAM support exception rules for endpoint troubleshooting and compatibility. - [Add a legacy exception rule for endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints.md): Add Cortex XSIAM legacy exception rules for endpoint compatibility requirements. - [Add a new exceptions security profile](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-new-exceptions-security-profile.md): Create Cortex XSIAM exceptions security profiles for legacy endpoint policies. - [Add a global endpoint policy exception](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-exception-profiles-and-rules/add-a-legacy-exception-rule-for-endpoints/add-a-global-endpoint-policy-exception.md): Add global Cortex XSIAM endpoint policy exceptions for selected endpoints. - [Set up Identity profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/set-up-endpoint-protection/set-up-endpoint-profiles-and-exception-rules/set-up-identity-profiles.md): Configure identity profiles for endpoint-related identity protection settings in Cortex XSIAM. - [Define endpoint groups](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/define-endpoint-groups.md): Define endpoint groups to organize endpoints and target policies in Cortex XSIAM. - [Configure global agent settings](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/configure-global-agent-settings.md): Configure global Cortex XDR agent settings for endpoints across your Cortex XSIAM environment. - [Apply profiles to endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/apply-profiles-to-endpoints.md): Apply Cortex XSIAM profiles to endpoints using targeted policy rules. - [Create an agent installation package](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/create-an-agent-installation-package.md): Create Cortex XDR agent installation packages for endpoint deployment in Cortex XSIAM. - [Manage an agent installation package](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/create-an-agent-installation-package/manage-an-agent-installation-package.md): Manage Cortex XDR agent installation packages and their deployment settings in Cortex XSIAM. - [Harden endpoint security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security.md): Harden endpoint security with Cortex XSIAM controls for devices, firewalls, encryption, and vulnerabilities. - [Device control](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/device-control.md): Configure Cortex XSIAM device control policies for USB, Bluetooth, printers, and peripheral access on endpoints. - [Host firewall](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall.md): Configure Cortex XSIAM host firewall policies to control endpoint network traffic. - [Host firewall for Windows](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-windows.md): Configure Cortex XSIAM host firewall policies to control inbound and outbound network traffic on Windows endpoints. - [Host firewall for macOS](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-firewall/host-firewall-for-macos.md): Configure Cortex XSIAM host firewall policies for macOS endpoints. - [Disk encryption](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/disk-encryption.md): Manage Cortex XSIAM disk encryption settings to protect endpoint data. - [Host Inventory](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/host-inventory.md): Use Cortex XSIAM Host Inventory to review endpoint hardware, software, services, and security details. - [Vulnerability Assessment](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/vulnerability-assessment.md): Use Cortex XSIAM Vulnerability Assessment to identify endpoint software vulnerabilities. - [Set a Cortex XDR agent Critical Environment version](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/harden-endpoint-security/set-a-cortex-xdr-agent-critical-environment-version.md): Set a Cortex XDR Critical Environment agent version for controlled endpoint upgrades in Cortex XSIAM. - [Manage endpoint protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection.md): Manage endpoint protection, agents, tags, policies, and operational settings in Cortex XSIAM. - [Move agents between managing servers](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/move-agents-between-managing-servers.md): Move Cortex XDR agents between managing servers without reinstalling endpoints in Cortex XSIAM. - [Manage endpoint tags](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags.md): Manage endpoint tags to organize and target endpoints in Cortex XSIAM. - [Create an endpoint tag](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/create-an-endpoint-tag.md): Create endpoint tags for endpoint organization and policy targeting in Cortex XSIAM. - [Remove an endpoint tag](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/remove-an-endpoint-tag.md): Remove endpoint tags that are no longer needed in Cortex XSIAM. - [Track your endpoint tags](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/track-your-endpoint-tags.md): View and filter Cortex XSIAM endpoint tags assigned by the Cortex XDR agent or in Cortex XSIAM. - [Permanently remove Endpoint tags from the system](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/permanently-remove-endpoint-tags-from-the-system.md): Permanently remove endpoint tags from Cortex XSIAM. - [Set an alias for an endpoint](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-tags/set-an-alias-for-an-endpoint.md): Set an alias to identify an endpoint more clearly in Cortex XSIAM. - [Manage endpoint prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-endpoint-prevention-profiles.md): Manage Cortex XSIAM endpoint prevention profiles and their applied protection settings. - [Create a new prevention policy rule for serverless function](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/create-a-new-prevention-policy-rule-for-serverless-function.md): Create Cortex XSIAM prevention policy rules for serverless functions. - [View information about your endpoint prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/view-information-about-your-endpoint-prevention-profiles.md): View Cortex XSIAM endpoint prevention profiles and their configured protection settings. - [Upgrade Cortex XDR agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/upgrade-cortex-xdr-agents.md): Upgrade Cortex XDR agents with Cortex XSIAM to maintain endpoint protection. - [Restart agent](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/restart-agent.md): Restart Cortex XDR agents from Cortex XSIAM for endpoint troubleshooting. - [Uninstall the Cortex XDR agent](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/uninstall-the-cortex-xdr-agent.md): Uninstall Cortex XDR agents from endpoints through Cortex XSIAM. - [Clear agent database](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/clear-agent-database.md): Clear the Cortex XSIAM agent database for endpoint troubleshooting. - [Delete Cortex XDR agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/delete-cortex-xdr-agents.md): Delete Cortex XDR agents from Cortex XSIAM when endpoints are decommissioned. - [Manage agent tokens](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/manage-agent-tokens.md): Manage Cortex XSIAM agent tokens for endpoint installation and registration. - [Retrieve support file password](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/retrieve-support-file-password.md): Retrieve the Cortex XSIAM support file password for endpoint troubleshooting. - [Send push notifications to iOS](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/send-push-notifications-to-ios.md): Send Cortex XSIAM push notifications to supported iOS endpoints. - [Monitor agent operational status](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-operational-status.md): Monitor Cortex XSIAM agent operational status across managed endpoints. - [Monitor agent activity](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-activity.md): Monitor Cortex XSIAM agent activity and endpoint events. - [Monitor agent upgrade status](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-security/install-and-manage-endpoints/manage-endpoint-protection/monitor-agent-upgrade-status.md): Monitor Cortex XSIAM agent upgrade status across your endpoint fleet. - [Endpoint DLP](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp.md): Protect sensitive endpoint data and prevent exfiltration with Cortex XSIAM Endpoint DLP. - [Cortex Data Loss Prevention (DLP) module overview](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview.md): Learn about the Cortex Data Loss Prevention (DLP) module in Cortex XSIAM, which provides a solution to prevent sensitive data exfiltration. - [Archive file classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/archive-file-classification.md): Learn how Cortex Data Loss Prevention in Cortex XSIAM inspects archive files and applies data-in-motion rules to protect sensitive data. - [True-file type detection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview/true-file-type-detection.md): Learn how Cortex Data Loss Prevention in Cortex XSIAM identifies true file types to enforce data-in-motion policies and prevent file-extension evasion. - [Personas workflow for DLP](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/personas-workflow-for-dlp.md): The data security administrator and data security viewer in Cortex XSIAM are responsible for identifying DLP requirements for creating data-in-motion rules and investigating issues and cases. - [Best Practices](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/best-practices.md): Apply Cortex XSIAM Endpoint DLP best practices to design effective data-in-motion rules. - [Configure DLP end-to-end](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/configure-dlp-end-to-end.md): Set up Cortex Data Loss Prevention in Cortex XSIAM, including endpoint settings, browser extensions, applications, and data-in-motion rules. - [DLP status in all endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/dlp-status-in-all-endpoints.md): View Cortex Data Loss Prevention status and browser extension status for managed endpoints in Cortex XSIAM. - [Cortex DLP threat detection and issues](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/cortex-dlp-threat-detection-and-issues.md): Investigate Cortex DLP issues in Cortex XSIAM triggered by data-in-motion rule violations and sensitive data exfiltration attempts. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.