Netsh 20

I have solved the image below.. (notifications only) But the upper image is kinda worries me.
Can anyone send me a working legit hash for edr_monitor and edr_agent?

It is possible that the EDR agent or other security software on the endpoint is conflicting with the firewall or causing the firewall to malfunction. This could be a result of misconfiguration or compatibility issues between the two security solutions.

The red dots on the EDR agent icon could indicate that there is a problem with the EDR agent or that it is not communicating properly with the security console or server. This could be due to several factors, including connectivity issues, software conflicts, or other configuration problems.

To investigate this issue, you may need to review the logs and alerts from your SIEM and EDR systems, as well as any other security software that is installed on the affected endpoint. You may also want to check for any known compatibility issues or software conflicts between the EDR agent and firewall solutions. Additionally, you may need to involve your IT team or vendor support to help diagnose and resolve the issue.

The command mentioned, "netsh advfirewall set allprofiles state off," is used to disable the Windows Firewall for all network profiles (Domain, Private, and Public). It turns off the firewall protection, allowing all incoming and outgoing network traffic without any filtering or blocking.

However, it's important to note that disabling the Windows Firewall can expose your computer or network to potential security risks. The firewall acts as a barrier between your system and the outside network, helping to prevent unauthorized access and protecting against malicious threats.

If you choose to disable the firewall temporarily for troubleshooting purposes or other specific reasons, make sure to take appropriate precautions, such as ensuring that your computer is not directly connected to the internet or being used in an insecure network environment.

After you have completed your intended tasks, it is strongly recommended to enable the Windows Firewall or configure it to allow only necessary traffic based on your network security requirements. You can enable the firewall again using the command:

netsh advfirewall set allprofiles state on


Always prioritize the security of your system and network by implementing a comprehensive and robust security strategy.

contact technical support

you may need to review the logs and alerts from your SIEM and EDR systems.

You may need to analyze the logs and alarms from your SIEM and EDR systems, as well as any other security software installed on the impacted endpoint, to investigate this issue. Check for any known compatibility concerns or software conflicts between the EDR agent and firewall solutions as well. You may also need to enlist your IT staff or vendor assistance to help diagnose and address the problem.

You may need to analyze the logs and alarms from your SIEM and EDR systems, as well as any other security software installed on the impacted endpoint, to investigate this issue.

The presence of red dots on the EDR agent symbol might indicate that the EDR agent is malfunctioning or that it is not interacting correctly with the security dashboard or server.

Please contact technical assistance.