topic Re: Cortex XDR in Cortex XDR Discussions

Cortex XDR

VineethArumulla — Thu, 24 Nov 2022 08:46:38 GMT

Can I disable the Cortex XDR on anyone of the endpoint(workstation or server) for temporary purpose from the XDR Console.

Re: Cortex XDR

neelrohit — Thu, 24 Nov 2022 08:59:29 GMT

HI @VineethArumulla ,

Thank you for writing to live community!

As of Cortex XDR agent 7.7 and above, you can pause the Cortex XDR agent protection capabilities on one or more endpoints while maintaining connectivity with the Cortex XDR console. By only pausing the protection and retaining connectivity, the Cortex XDR agent will run with all the profiles disabled, but continue to send data and take actions from the server. After you are ready, you can resume the endpoint protection.

Navigate to Endpoints>All Endpoints.
In the All Endpoints page, select the endpoints you want to pause protection on, right-click and select

Endpoint Control>Pause Endpoint Protection

Re: Cortex XDR

VineethArumulla — Thu, 24 Nov 2022 12:12:31 GMT

Ok Thanks, If I do agent uninstall from the console, can I reinstall XDR in which I have uninstalled from the console itself.

Re: Cortex XDR

neelrohit — Thu, 24 Nov 2022 15:03:49 GMT

Hi @VineethArumulla ,

Installation action is not applicable from Cortex XDR console and needs to be done manually.

Regards.

Re: Cortex XDR

VineethArumulla — Thu, 24 Nov 2022 15:45:22 GMT

Thanks