Endpoint protection statuses in Nebula – ThreatDown, powered by Malwarebytes, Support Site

The protection status widget and column displayed in Nebula report on the protection state of your endpoints. Locate the widget on the Dashboard page and column on the Endpoints page in your console. Use these details to understand and resolve endpoints which aren't in a Protected status.

See table below for statuses and resolutions:

Protection Status	Description	Resolution
Protected	The Endpoint Protection (EP) plugin is installed and running.	No resolution is necessary. The endpoint is healthy and actively monitoring for threats.
Unprotected	The EP plugin may not be installed. Web Protection for Mac is enabled but the system extension is not allowed.	Uninstall and reinstall the endpoint agent. Reboot the endpoint to show the prompt for allowing the system extension. If the issue persists, contact Support.
Scan Only	The account is missing an active subscription EP or higher. The endpoint is in a policy without Malware protection enabled. Full Disk Access (FDA) for Endpoint Protection is not enabled on macOS. If everything is already checked, the EP plugin may be encountering issues with the Endpoint Agent.	Add an EP subscription to the account. Enable Malware protection in the policy settings. Enable FDA for the macOS device. If the issue persists after trying all of the above, uninstall and reinstall the endpoint. For further assistance, contact Support.
Pending	The machine has not uploaded agent information to Nebula.	Ensure the endpoint meets our network access requirements.
Mobile Protection	iOS, Android, and Chrome OS devices.	No resolution is necessary. This protection status is designated for mobile devices.
Unknown	The EP plugin is corrupted and not communicating with the Endpoint Agent.	Uninstall and reinstall the endpoint. If the issue persists, contact Support.

Still have questions?