By default, endpoint threat prevention is set to Block and report, but Jamf recommends confirming this option is selected in any existing plans.
Note:
The Report only and Disable options should only be used when troubleshooting.
When creating or editing a plan, confirm that Block and report is selected under Endpoint Threat Prevention, and then configure any additional plan settings. Click Save to apply the plan settings.
Jamf Protect will now block and quarantine threats and report them as alerts.