topic Help! Upgraded to 7.8.1.11343 now all clients can’t run certain applications in Cortex XDR Discussions

Help! Upgraded to 7.8.1.11343 now all clients can’t run certain applications

Justin_Payne — Fri, 02 Dec 2022 20:25:02 GMT

We upgraded our clients from version 7.7.X to 7.8 and things like Visual Studio and Gitkraken and homegrown apps fail to run. No logs and really no errors other than just crashes or freezes. I pause XDR Agent and it runs fine. Anyone else experience this issue? I am at a loss

Re: Help! Upgraded to 7.8.1.11343 now all clients can’t run certain applications

aleksandar.astardzhiev — Sat, 03 Dec 2022 18:00:04 GMT

Hi @Justin_Payne ,

We are using 7.8.1 for quite some time now (majority of the endpoints are running the same exact version as yours) and we haven't faced any issues.

Try to isolate the cause:

- Create new Malware profile with all actions set to disable. Apply this profile to test policy.

- Perform check-in from XDR agent, or perform heartbeat from XDR console. (wait 1-2mins just to be sure new settings are applied)

- Try to reproduce the problem. What is the result?

- Put back your original Malware profile

- Create new Exploit profile with all settings disabled, put it in the test policy and check-in

- Try to reproduce the problem? Any change?

Re: Help! Upgraded to 7.8.1.11343 now all clients can’t run certain applications

EJaspe — Thu, 08 Dec 2022 12:02:47 GMT

Yes, We are also encountering issue like yours but different .exe files and application like Adobe and Microsoft Office.

Not all our endpoints affected like mine which is in 7.8.1 agent version but still need to be fix it by our PAN engineers.