Linux Agent Tampering protection

J.Gammara — Mon, 20 Jan 2025 21:28:48 GMT

Hello Palo Alto Live Community,

I hope this post finds you well. I’m currently exploring the tamper protection capabilities of Cortex XDR for Linux and would appreciate insights from this knowledgeable community.

Specifically, I am interested in understanding:

What features does Cortex XDR provide to prevent tampering with its agent or configurations on Linux Distros?
Are there any built-in safeguards against unauthorized access or modifications?
What additional recommendations would you suggest to enhance tamper protection when using Cortex XDR in an enterprise environment for Linux Servers?

Your shared experiences or resources on this topic would be incredibly helpful. Thank you in advance for your guidance!

Looking forward to your responses.

Re: Linux Agent Tampering protection

mavega — Tue, 21 Jan 2025 16:49:31 GMT

Hello,

The anti tamper protection feature is currently available for MacOS and Windows, however there are other protection methods use for Linux OS.

You can find more information on protection modules in this link:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Endpoint-protection

If this post answers your inquiry pleas mark it as solution.

topic Linux Agent Tampering protection in Cortex XDR Discussions

Linux Agent Tampering protection

Re: Linux Agent Tampering protection