Status icons of the Aurora Protect Desktop agent

When Aurora Protect Desktop is installed on a device, the icon in the system tray indicates the agent status.

Status icon

Status description


The Safe icon

Safe: There are currently no active threats detected on the device. All threats were successfully blocked or terminated by the agent.

This status displays when all reported threats are blocked, terminated, or added to the exclusion list.


The Unsafe icon

Unsafe: There are active threats on the device, but they are not blocked from executing.

This status displays when a threat is detected and reported to Endpoint Defense Cloud services, but it is not blocked from running on the device. It also has not been added to the exclusion list in the device policy.

To resolve this status, try the following:
  • Open the Aurora Protect agent UI to view a list of threats. Stop using the suspicious applications or terminate them to eliminate the threat.
  • If the threat is from a legitimate source, such as a work-related app or script, contact your administrator to add an exclusion in the device policy.

The Offline icon

Offline: The device could not connect to Endpoint Defense Cloud services.

This status might display for one of the following reasons:
  • The device is not connected to the Internet.
  • The device connection is blocked by a firewall or port.
  • The device is prevented from connecting to Endpoint Defense Cloud services.
To resolve this status, try the following:
  • Check the wired or wireless network connection.
  • Check your network settings. For example, if you are using a proxy or VPN connection, verify the configuration with your administrator.
  • Contact your administrator to verify your connection.