If an icon has on it, this means that the last attempt to update the protection configuration has failed. This does not mean that your API is no longer protected: the running API Firewall instances are using the last successful protection configuration from before the failed update attempt.

The example screenshot shows the Firewall column from an API collection page. The collection has six APIs that showcase the six possible statuses for the firewall instance: active, active with a failed configuration attempt, error preventing the firewall from starting, inactive but configured, not configured, and inactive but configured with a failed configuration attempt.

View the API Firewall configuration status
/Tasks/manage_protection.htm#View