Cortex XDR Live Terminal Session - Can you disable the agent notification?

KaWright — Mon, 15 May 2023 20:27:29 GMT

I'm looking for a way to disable the little notification pop-up that occurs on the endpoint when a security tech opens a live terminal session through the console, but I haven't been able to find anything in the tenant settings or KB articles so hoping somebody here can help. Anybody know if this is possible? Thanks!

Re: Cortex XDR Live Terminal Session - Can you disable the agent notification?

neelrohit — Tue, 16 May 2023 01:34:45 GMT

Hi @KaWright ,

Thank you for writing to Live Community!

The agent settings profile controls how the Live Terminal Session Interaction should work and you should be able to control that option in various granular ways in Cortex XDR. Cortex XDR typically offers you the capability to Notify the end user or Disable the notifications or even Request end user permission before you can initiate a live terminal session to the endpoint.

Also, you can tweak the active session indication for the end user around the same lines. Coming to your request to disable the notifications, you can select "Disable" and it should not show the notifications anymore. I am attaching screenshots for your reference.

Hope this helps. Please mark the response as "Accept as Solution" if it answers your query.

Regards.

topic Cortex XDR Live Terminal Session - Can you disable the agent notification? in Cortex XDR Discussions

Cortex XDR Live Terminal Session - Can you disable the agent notification?

Re: Cortex XDR Live Terminal Session - Can you disable the agent notification?