Computer notifications section (2)

These notifications describe problems encountered on computers with regard to the operation of Advanced EDR and provide instructions for resolving them.

Occasionally, notifications (1) are accompanied by codes (2).

Unprotected computer notification and associated code

Each code is related to an error that occurs before or during the installation of the protection on computers. For more information about these codes, see https://www.pandasecurity.com/en/support/card?id=700031.

These tables list the types of notifications generated and recommended actions.

Isolated computers

Notification	Description	Reference
Isolated computer	The administrator has isolated the computer and all connections have been blocked except for those required by Advanced EDR to work correctly.	For more information, see Computer isolation.
We’re trying to isolate this computer	The Advanced EDR server has attempted to isolate the computer but cannot because the computer is offline or turned off.	For more information, see Offline computers.
We’re trying to stop isolating this computer	The Advanced EDR server cannot stop the isolation command for the computer because the computer is offline or turned off.	For more information, see Offline computers.
Notifications related to the computer isolation feature

Computers in containment mode

Notification	Description	Reference
Computer in “RDP attack containment” mode	The computer has received a high number of failed RDP connection attempts, and all RDP connections have been blocked to contain the attack.	See Detection and protection against RDP attacks
We’re trying to end the “RDP attack containment” mode on this computer.	The administrator has manually ended the “RDP attack containment” mode on the computer, but the operation is not yet complete. This could be because the computer is turned off, offline, pending restart, or the action is in progress.	See Detection and protection against RDP attacks
Notifications related to the attack containment feature

Licenses

Notification	Description	Reference
Computer without a license	There are no available licenses to assign to the computer. Release an assigned license or purchase more Advanced EDR licenses.	For more information, see Releasing licenses.
Computer without a license	There are free licenses but none of them have been assigned to this computer.	For more information, see Assigning licenses.
Notifications related to license assignment

Computer in Audit mode

Notification	Description	Reference
Computer in Audit mode	Enabling Audit mode for a settings profile does not change the overall status of the protections applied to the computers that receive the settings. Nor does it change the configuration of the protections in the web console. Threats continue to be detected and reported, but they are not blocked or deleted.	For more information, see Audit mode
Notification related to the Audit mode

Protection software installation errors

Errors that occur during the protection software installation process are shown with an error code, its associated extended error code, and an extended error subcode, where available. For more information, see table Fields displayed in the exported file.

Notification	Description	Reference
Unprotected computer	There was an error during installation of the security product on the computer. With errors whose origin is known, a description of the cause is displayed. If the origin is unknown, the associated error code is displayed.	For more information, see Product features and requirements.
	A reboot is required to complete the installation due to a previous uninstallation.	For more information, see Computer restart.
	The agent does not have the permissions required on macOS computers.	For more information, see Requirements for macOS platforms.
	Error when installing the protection on macOS 13 Ventura. The user must allow EndpointProtectionService from Login Items.	For more information, see Requirements for macOS platforms.
	Unsupported Linux kernel.	For more information, see https://www.pandasecurity.com/en/support/card?id=700031.
	Unsupported Unbreakable Enterprise Kernel (UEK) release.	For more information, see https://www.pandasecurity.com/en/support/card?id=700031.
Error installing Cytomic Data Watch	There was an error during installation of Cytomic Data Watch on the computer.	For more information, see Cytomic Data Watch requirements.
Error installing the protection and Cytomic Data Watch	There was an error during installation of the protection and the module on the computer.	For more information, see Product features and requirements and Cytomic Data Watch requirements.
Error installing the patch manager	There was an error during installation of the patch management module.	For more information, see Make sure that Cytomic Patch works correctly.
Error installing the encryption module	There was an error during installation of the encryption module.	For more information, see Cytomic Encryption minimum requirements.
Error installing the Cytomic agent	Wrong credentials.	For more information, see Offline computers.
	The discovery computer is not available.	For more information, see Security module panels/widgets, and Designating a discovery computer.
	Unable to connect to the target computer because it is turned off or does not comply with the hardware or network requirements.	For more information, see Security module panels/widgets, and Product features and requirements.
	The computer operating system is not supported.	For more information, see Product features and requirements.
	Unable to download the agent installer due to a network error.	For more information, see Product features and requirements.
	Unable to copy the agent installer due to low free disk space on the computer.	For more information, see Product features and requirements.
	Unable to copy the agent installer because the target computer is turned off or does not meet the remote installation requirements.	For more information, see Offline computers, and Product features and requirements.
	Unable to register the agent.	For more information, see Offline computers, and Product features and requirements.
Error communicating with servers	The computer cannot connect to one or more servers in the Cytomic cloud.	For more information, see Product features and requirements.
Notifications related to the installation of the Advanced EDR software

Protection software reinstallation errors

Errors that occur during the protection software reinstallation process are shown with an error code, its associated extended error code, and an extended error subcode, where available. For more information, see table Fields in the Computer Protection Status exported file.

Notification	Description	Reference
Pending protection reinstallation	The administrator requested reinstallation of the security product. Reinstallation is incomplete because the computer is off or offline, or there is still time before the forced restart.	See Offline computers and Remote reinstallation requirements.
Pending agent reinstallation	The administrator requested reinstallation of the agent. Reinstallation is not complete because the computer is off or offline, or there is still time before the forced restart.	See Offline computers and Remote reinstallation requirements.
Error installing the Cytomic agent	Wrong credentials.	For more information, see Offline computers.
	The discovery computer is not available.	For more information, see Offline computers.
	Unable to connect to the computer. It is off or offline, or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	The operating system is not supported. It does not meet remote installation requirements.	See Remote reinstallation requirements.
	Unable to download the agent installer to the target computer. The computer is turned off or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	Unable to copy the agent installer to the target computer. It is turned off or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	Unable to uninstall the agent from the target computer. It is turned off or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	Unable to install the agent on the target computer. It is turned off or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	Unable to register the agent because the computer is turned off or does not meet remote installation requirements.	See Offline computers and Remote reinstallation requirements.
	Action requires input from the user.	See Offline computers and Remote reinstallation requirements.
Notifications related to the reinstallation of the Advanced EDR agent

Advanced EDR software issues

Notification	Description	Reference
Unprotected computer	An error was encountered in the advanced protection. Restart the computer to fix the problem.	See Computer restart.
Cytomic Data Watch error	An error was encountered in Cytomic Data Watch. Restart the computer to fix the problem.	See Computer restart.
Error encrypting the computer	Unable to encrypt the computer due to an error.	See Computer restart.
Notifications related to Advanced EDR software issues

Pending user or administrator action

Notification	Description	Reference
Encryption pending user action	The user must restart the computer or enter the relevant encryption credentials to complete the encryption process.	See Encryption and decryption on Windows computers and Encryption and decryption on macOS computers
Pending restart	The administrator has requested that the computer be restarted but it has not restarted yet as it is offline or the time period for a forced reboot has not ended yet.	See Offline computers.
Reinstalling the protection.	The administrator has requested that the computer protection be reinstalled but the operation is not yet complete because the computer is turned off or offline, the amount of time to wait before the reinstallation is forced has not passed, or the reinstallation is in progress.	See Remote reinstallation
Unprotected computer	The advanced protection is disabled. Enable the protection.	See Manual and automatic assignment of settings profiles, Creating and managing settings profiles, and Advanced protection.
Computer offline for N days	The computer is turned off or does not meet the network access requirements.	See Product features and requirements
Outdated protection	The protection requires the local user to manually restart the computer to complete the installation.	This is only on computers with the Home and Starter versions of Windows.
Connection problems with the Cytomic servers	The computer cannot successfully connect to the servers that store the security intelligence.	See Product features and requirements
The administrator has changed the protection status from the computer local console	The administrator has changed the protection settings from the agent installed on the workstation or server. The current settings do not match the settings defined from the web console.
Cannot upgrade this computer’s protection to the latest version	The new versions of the protection require that the operating system recognize SHA-256 signed drivers. This computer does not support that signature format and therefore the installed protection cannot be upgraded to the latest version	See Support for SHA-256 driver signing .
Notifications related to lack of user or administrator action

Computer with out-of-date protection

Notification	Description	Reference
Outdated protection	A reboot is required to complete the protection update process.	For more information, see Computer restart.
	An error occurred during the update process. Make sure the computer meets the hardware and network requirements.	See Product features and requirements and the amount of available disk space in the Hardware section (7).
	Updates are disabled for the computer. Assign the computer a settings profile with updates enabled.	See Protection engine updates.
Malware and threat knowledge out of date	Knowledge updates are disabled for this computer. Assign the computer a settings profile with updates enabled.	See Knowledge updates.
Notifications related to out-of-date Advanced EDR software