By default, Exploit Guard Protection is enabled for the Agent Default Policy, unless you disabled it. When Exploit Guard Protection is enabled, its exploit detection function is enabled by default, but its exploit prevention function is disabled. Both functions can be enabled and disabled completely for all endpoints in your network or by host set. If Exploit Guard Protection is disabled for a policy, it is turned off for all host endpoints assigned to that policy.
Important
Exploit Guard Protection is enabled by default after upgrading or installing Endpoint Security (HX) xAgent software.