topic Re: Windows version 21H2 - Cortex incompatibility in Cortex XDR Discussions

Windows version 21H2 - Cortex incompatibility

BigPalo — Fri, 15 Oct 2021 08:01:42 GMT

Hi,

We received a PA notification about Microsoft Windows 10 version 21H2 running on specific hardware architectures are incompatible with a security engine in Cortex XDR agent 7.0.0 – 7.4.0.

In our case we have the following scenario:
- Cortex agent version: 7.4.3 and 7.5.0
- Cortex XDR PRO license (Endpoint protection + behavior analytics)
- Microsoft Windows 20H2 version

At the beginning of the year we plan to upgrade to Windows version 21H2.

We would need to know how this announced incompatibility affects our case and it is necessary to take some action.

On the other hand, we do not quite understand what impact the following paragraph has on us:
While only Windows 10 version 21H2 and higher are incompatible, the Cortex XDR agent will disable the affected security engine in Windows 10 version 20H2, since it must be disabled prior to the upgrade to Windows 10 version 21H2.

What "affected security engine" do you mean?

From the "Impact" section, how does it affect us if the BTP module is disabled?

Can anyone respond to out questions?

Re: Windows version 21H2 - Cortex incompatibility

P.Jacob — Fri, 15 Oct 2021 17:14:33 GMT

not really adding much value here but I feel the exact same way. I am thinking I should just deploy v7.5.1. I wished that with the cortex versions there was a preferred version like with pan os.

Re: Windows version 21H2 - Cortex incompatibility

BigPalo — Thu, 21 Oct 2021 13:54:39 GMT

i understand that cortex disables security engine. But this is only in those CORTEX versions?

Re: Windows version 21H2 - Cortex incompatibility

P.Jacob — Thu, 21 Oct 2021 14:40:58 GMT

I think all you can really do is to follow this page for compatibility, looks like it was just updated on 10/14

https://docs.paloaltonetworks.com/compatibility-matrix/cortex-xdr/where-can-i-install-the-cortex-xdr-agent.html

We have some win11 and 21h2 slowly creeping into our environment, not sure what the official word is on cortex validation for new OS's.