topic Re: Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue in Cortex XDR Discussions

Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue

M.Rivera653095 — Thu, 19 Feb 2026 15:41:48 GMT

Hello everyone,

We have encountered and issue where the target servers do not get content updates. The citrix Windows servers reboot nightly with the golden image configurations but do not receive the latest content updates. At the same time, around noon we have to reboot the target servers due to write cache filling up to 100%. Have you encountered similar issues and what did you do to remediate? Thank you!

Re: Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue

tlmarques — Thu, 19 Feb 2026 21:57:13 GMT

Do you use brokers?
Are you able to run cytool connectivity_test?

Re: Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue

M.Rivera653095 — Thu, 19 Feb 2026 22:44:11 GMT

Hi Tiago,

We do not use brokers.

Thanks,

Marco

Re: Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue

tlmarques — Thu, 19 Feb 2026 22:59:02 GMT

When you create the Golden image you did this steps:

Ensure the agent was installed with the VDI flag: msiexec /i cortexxdr.msi VDI_ENABLED=1.
Force a content update: Run cytool content update (or check-in via the console).
Crucial: Run the "Image Prep" scan. This pre-verifies files so the targets don't have to do it live:

cytool imageprep scan timeout 4 upload 95 path C:\temp\
Wait for it to finish, then shut down and promote the image.

on agent VDI profile check this:

Re: Cortex XDR 8.9 Non-Persistent Citrix Servers and Cache Write Issue

M.Rivera653095 — Tue, 24 Feb 2026 18:00:46 GMT

"VDI installation is intended for single-user scenarios, such as full desktop VDI. Temporary Session (TS) installation is best used for multi-user scenarios, such as terminal services." We use TS not VDI