topic Mac Cortex XDR Upgrade causing Device Freezing in Cortex XDR Discussions

Mac Cortex XDR Upgrade causing Device Freezing

JulianR129 — Mon, 10 Feb 2025 14:37:44 GMT

Hello,

My organisation is currently running Cortex XDR 8.6.0 on Sequoia. We're finding that when performing upgrades of the application via the Console or by Jamf that the who device will freeze for 15+ seconds.

We're in an environment where we're running both Cortex XDR and Defender (Real Time Protection enabled) and I think it's some sort of interaction between the apps that's causing the problem.

Users in the organisation are also reporting instability and freezing at random on devices throughout the day which may be related to this.

Has anyone else experienced this?

Re: Mac Cortex XDR Upgrade causing Device Freezing

jmazzeo — Mon, 10 Feb 2025 19:48:56 GMT

Hi Julian, please take a look at the documentation with the recommendations when using a third party security tool: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Compatibility-Matrix/Cortex-XDR-agent-compatibility-with-third-party-security-products

If this post answers your question, please mark it as the solution.If this post answers your question, please mark it as the solution.

Re: Mac Cortex XDR Upgrade causing Device Freezing

JulianR129 — Tue, 11 Feb 2025 09:29:24 GMT

Looking at the link the only mention of Defender is under Third-Party Windows Security Applications where it states "If a Cortex XDR agent is running alongside Microsoft Defender on endpoints running Windows Server editions, we recommend setting Defender to Passive mode." I don't believe this is relevant here. The only third-party Mac security application mentioned is Symantec Endpoint Protection.

I have looked for further documentation on this but there does not appear to be anything else.

Re: Mac Cortex XDR Upgrade causing Device Freezing

k-lesne — Fri, 21 Feb 2025 13:09:47 GMT

Hi Julian,

We have the same problem in our MacOS and we don't have Defender.
Have you solved the problem?
We're going to try to upgrade to version 8.7 and create a case now that we've identified that the problem is with the Cortex xDR agent.