# Integration: security\_detection\_engine-1

**URL:** <https://discuss.elastic.co/t/integration-security-detection-engine-1/291053>\
**Category:** Endpoint Security\
**Tags:** fleet\
**Created:** [December 6, 2021, 2:13pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053 "2021-12-06T14:13:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![lamp123432](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Post date:** [December 6, 2021, 2:13pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/1 "2021-12-06T14:13:46Z")

</div>

Is this needed?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/f/5fb35338f7e56cc861803bbdc8f9536c2da2c32e.png)

Elastic Endpoint seems to be working great without it, so I'm wondering why it's there and why should I assign is as an integration to my agents?

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 6, 2021, 3:24pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/2 "2021-12-06T15:24:05Z")

</div>

Hey @lamp123432 , that integration will allow you to apply "out of band" rule updates to Elastic Security, instead of having to wait for the next release. It's not needed for Elastic Security, or the Endpoint Security integration to function, it's there for convenience.

---

<div class="post-metadata">

**Author:** ![devonkerr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/devonkerr/32/56711_2.png) [@devonkerr](https://discuss.elastic.co/u/devonkerr)\
**Post date:** [December 6, 2021, 4:22pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/3 "2021-12-06T16:22:35Z")

</div>

With @jamesspi's reply in mind, I would recommend that you enable those OOB updates if you're using the Security solution. We update prebuilt rules frequently to improve efficacy and reduce noise, in addition to new rules for emerging and other threats. Those things will still be available for manual installation and will show up in the next minor release, should you prefer those methods.

---

<div class="post-metadata">

**Author:** ![lamp123432](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Post date:** [December 6, 2021, 6:14pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/4 "2021-12-06T18:14:42Z")

</div>

Hello, by OOB, you mean if a computer disconnects from the internet? Does this mean that without this integration, the PC becomes vulnerable if it becomes OOB?

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 6, 2021, 6:28pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/5 "2021-12-06T18:28:54Z")

</div>

Hey lamp123432,

No - out of band means released in between official minor releases.

James

---

<div class="post-metadata">

**Author:** ![lamp123432](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Post date:** [December 6, 2021, 8:02pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/6 "2021-12-06T20:02:45Z")

</div>

Ah, different meaning in software development vs network : P

Thanks for the help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 3, 2022, 8:02pm UTC](https://discuss.elastic.co/t/integration-security-detection-engine-1/291053/7 "2022-01-03T20:02:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
