Terminal Services agent caveat - (Windows 2012 R2 servers only) Disable Enhanced Protected Mode in Microsoft Internet Explorer for each user who uses that browser. Palo Alto Networks recommends that you do not disable Protected Mode, which differs from Enhanced Protected Mode. This task is not necessary for other browsers such as Google Chrome or Mozilla Firefox.