How to keep cortex xdr in passive mode

Seth_Sakshi — Fri, 31 May 2024 07:26:54 GMT

Hello All,

We are initiating the migration process from cortex xdr to crowdstrike, so can we put the cortex xdr in passive mode.

Regards,

Sakshi Seth

Re: How to keep cortex xdr in passive mode

JohnSmith7732 — Wed, 05 Jun 2024 18:45:49 GMT

that should depend on what you mean by migration to CrowdStrike. EPP or EDR?

Crowdstrike is cloud native EDR. The EPP is afterthought. Be more specific

If you aren't going all in with the Cortex Pro (EDR/XDR), don't give up the Cortex "Prevent" (EPP) on the host. One informs the other. As long as its there you can always switch back. flipping the script so to speak and 2 sources of intel is better than 1. As former McAfee ATA Ive built the technology platforms in a few flavors but I personally like the Cortex Prevent EPP and Defender EDR (Passive). I like it for what it is.. Metrics for the crew and telemetry for troubleshooting. If i had a crew of analyst or at least one good one and some money id go all in on the Palo XDR platform. Shiny toys get dull if you cant or dont use them

topic Re: How to keep cortex xdr in passive mode in Endpoint (Traps) Discussions

How to keep cortex xdr in passive mode

Re: How to keep cortex xdr in passive mode