Cortex XDR Scanning on Exchange and Sharepoint Servers

ldonahue — Thu, 18 Jan 2024 14:56:50 GMT

Hello,

We are looking to add the XDR agent to our on-prem Exchange and Sharepoint servers, and I had two questions about the scanning capabilities of the agent on these servers.

Does XDR scan emails and attachments that reside on Exchange servers?
Does XDR scan files that are stored on Sharepoint? If an external user posts a document on our public facing sharepoint server, will the XDR agent scan those files, or does it only scan the Sharepoint OS files?

I couldn't find any information in the documentation, so any insights would be appreciated.

Thank you

Re: Cortex XDR Scanning on Exchange and Sharepoint Servers

nsinghvirk — Thu, 25 Jan 2024 15:57:26 GMT

Hello @ldonahue

Thanks for reaching out on LiveCommunity!

1. XDR do not support scan of .eml files. For the exchange server, XDR will provide protection like any other endpoint and scan the associated disk spaces within it based on the set schedule of scan.

2. Yes, XDR can scan files stored on Sharepoint's disk space provided that the file format is supported. Scan of files is according to the scan schedule.

Please follow below link to find the list of supported file formats.

https://docs.paloaltonetworks.com/advanced-wildfire/administration/advanced-wildfire-overview/advanced-wildfire-file-type-support/advanced-wildfire-file-type-support-complete

Please click Accept as Solution to acknowledge that the answer to your question has been provided.

topic Re: Cortex XDR Scanning on Exchange and Sharepoint Servers in Cortex XDR Discussions

Cortex XDR Scanning on Exchange and Sharepoint Servers

Re: Cortex XDR Scanning on Exchange and Sharepoint Servers