# Does Protections and settings work separately in Endpoint Security integration?

**URL:** <https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318>\
**Category:** Endpoint Security\
**Created:** [December 22, 2020, 1:30am UTC](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318 "2020-12-22T01:30:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![roh](https://avatars.discourse-cdn.com/v4/letter/r/e95f7d/32.png) [@roh](https://discuss.elastic.co/u/roh)\
**Post date:** [December 22, 2020, 1:30am UTC](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318/1 "2020-12-22T01:30:15Z")

</div>

Hi all!  
There's two configuration when you click Endpoint Security integration.  
One is "Protections" and the other one is "Settings".  
My question is : If you disable malware protection, does agent only collects events? Or does it just not work?  
I wonder protection and collection work separately.

TIA

---

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [December 22, 2020, 8:19am UTC](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318/2 "2020-12-22T08:19:22Z")

</div>

> [@roh](#):
>
> disable malware protection

I'm pretty sure " **Malware Protections Enabled toggle**" controls Prevent and Detect, so if you toggle that off neither will work. So you want to leave the toggle on and have PREVENT checked on and you will collect events related to malware.

 ![](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d5b183ce83b82d2630eda75a8f04a8ac34aecaf3.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 19, 2021, 8:19am UTC](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318/3 "2021-01-19T08:19:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.