How to delete endpoints from ALL ENDPOINTS

Shashanksinha — Thu, 10 Nov 2022 17:07:05 GMT

Hi,

we are the delete endpoint option from all endpoints by right-clicking..

But they keep on appearing back on XDR any reason why?

Re: How to delete endpoints from ALL ENDPOINTS

neelrohit — Thu, 10 Nov 2022 20:07:01 GMT

Thank you for writing to live community!

This is an expected behaviour as deleting the endpoints does delete the disconnected agents entry from the console level only and not from the actual endpoint level. Deletion is a cosmetic UI level feature which has nothing in relation to the agent connection. As a result, whenever disconnected deleted endpoints get network connection, they reconnect back to the Cortex XDR server. You can also observe that you cannot delete connected endpoints. Inorder to force the agents to not connect is only possible using uninstall action.

Hope this helps.

Check out Beacon for learning and training on our product:

https://beacon.exceedlms.com/student/catalog/browse

Have you explored Beacon yet? It contains detailed training on all Palo Alto Networks products

https://live.paloaltonetworks.com/t5/blogs/beacon-be-the-hero-your-security-deserves/ba-p/284876

topic How to delete endpoints from ALL ENDPOINTS in Cortex XDR Discussions

How to delete endpoints from ALL ENDPOINTS

Re: How to delete endpoints from ALL ENDPOINTS