This article will explain the ACSIA alert called "ACSIA agent disconnected".
Explaining the ACSIA agent disconnected
This alert is telling you that the ACSIA agent has not been able to reach the server for more than 24 hours.
This alert needs immediate investigation because, if the agent can't reach the server it means that you have:
- Reduced Visibility. With the agent disconnected, you lose visibility into the activities and security status of the affected endpoint device. This creates a blind spot, making it harder to detect and respond to security incidents.
- Increased Vulnerability. The disconnected endpoint becomes more vulnerable to security threats, as it's no longer actively monitored or protected by ACSIA.