From the Endpoint Posture Check tab of the Device Settings page (Administration > System Settings > Device Settings), you can configure security settings for your endpoints (Windows client, MacOS client, or browser) for the available security controls. We provide recommended evaluation criteria for each control, which serves as the default option for each tenant. You can change the option based on your security requirements. Example: If the Endpoint Protection is Inactive, the risk level can be ignored for the device (the endpoint protection status will not be factored while deciding device posture status).

You can set a risk level for each control: Ignore, Low Risk, Medium Risk, or High Risk.