Below are the differences between the free and full mode and how they look like on different UI:
| Free Mode Endpoint Sensor (Complimentary XDR) | Full Mode Endpoint Sensor (XDR Add-on; for both Saas Trial & Full licenses) | |
|---|---|---|
| CLP | A "free" entry will be displayed like the following:
| XDR Add-on normally won't be displayed on CLP alone As for endpoints, Apex One as a Service is the pre-requisite to purchase XDR Add-on |
| Won't have XDR open console link | Will have XDR open console link after customers add XDR Add-on licenses | |
| XDR : Product Connector | Product name is listed as "Apex One" for both on-prem & Saas; but Description can tell it's for Complimentary XDR UI Example | On-prem Apex One full EDR is not supported on XDR yet Saas will have an entry called Apex One as a Service |
| No "un-register" button for customers to remove the entries. No matter EPP license expired or not. | Customers can un-register the entry with "un-register" button | |
| The Apex One with Complimentary XDR cannot be edited. | Customer can edit the description. | |
| XDR : Inventory App | Can enable free mode EDR (actually it's the only place to enable free EDR) | If customers convert free to full mode via Apex One policy, it's also possible for them to manually disable full mode EDR here (this is actually a known issue) But if the endpoints are not converted from free to full, i.e. full mode is directly enabled from Apex One console, Inventory App won't see these endpoints |
| XDR : Response App | User cannot issue the Response action in Free EDR. If they clicked the button on context menu, they will see a promotion modal to inform user to purchase Full to use the Response. UI Example | Can issue Response actions to full mode agents |
| Will not have result if customers clicked on Response app. They will see the promotion content. UI Example | User can have the task visibility on Response App page | |
| XDR : Search App | User cannot have Endpoint detection logs in the result. | User can have search result on both endpoint Activity data and Detection logs. |
| XDR : Workbench App | The Model with endpoint detection as trigger won't be triggered in free mode. | User can see all the endpoint models trigger by activity data or detection. |
| Apex One/Central | Free mode EDR endpoints are not listed on Apex Central console | Full mode EDR endpoints are listed in Apex Central Inventory View |
| EDR features on Apex Central console cannot be used for free EDR | Customers can choose to use EDR on Apex Central or XDR console | |
| Customers won't see free licenses on license management page (it's more like a complimentary offering with existing EPP license) | Customers will see formal licenses on license management page | |
| Agent Sides | Apex One agent system tray still display a green light if free mode is enabled | Apex One agent system tray will display a green light if full mode is enabled |