Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Cortex agent got uninstall automatically

Hi All,

 

Last night Cortex agent got uninstalled automatically on my system and then I had to install it back manually. There are no logs in agent audit logs for this in cortex console.

 

We need to find out why this was uninstalled automatically. Will

...

AsifSid by L2 Linker
  • 2387 Views
  • 2 replies
  • 0 Likes

Problems installing Cortex XDR to a user

Hello Palo Alto Team.

 

When installing Cortex XDR on a user, we must disable Windows Anti-Tampering, due to the following error:

 

 

If Windows Anti-Tampering is disabled, we still have installation problems.

 

 

Operating system name: Microsoft Windows 10

...

irissentinel_0-1637154458742.png
irissentinel_2-1637154670760.png

Cortex XDR high RAM usage

Hello everybody,

 

  We have a problem with RAM usage of our Cortex XDR agents. We have seen this issue about 7-8 endpoints for 2 moth. Ram usage of our endpoints increased up to 2 GB. it seems this is not agent version related problem. Because today w

...

Resolved! Cortex XDR Broker VM questions

Hi All,

 

Can anyone answer a few questions about Cortex XDR Broker VM?

 

If the Broker VM is being used as a proxy, do the hosts connecting to the Broker VM need to be on the same subnet as the Broker VM or can they communicate with the Broker VM via th

...

Ben-Price by L4 Transporter
  • 3097 Views
  • 1 replies
  • 0 Likes

BrokerVM proxy configuration error

hello, 

 

i'm facing this issue when i try to configure the ip addresse of the proxy so i can send logs throught brokerVM: 

C:\Program Files\Palo Alto Networks\Traps>cytool proxy set "X.X.X.X:YY"

Enter supervisor password:

RpcClient: SendRequest: Error 13

...

NCherbib by L2 Linker
  • 3957 Views
  • 3 replies
  • 0 Likes

problem with cytool

hello,

 

i'm facing an issue will adding proxy setting using a command  cytool i recieve this error "cytool is not recognized as an internal or external command, operable program or batch file."

 

any help please.

 

BR.

NCherbib by L2 Linker
  • 4482 Views
  • 4 replies
  • 0 Likes

Tracking Corrupt Cortex XDR Agents

I am looking for any input on how other customers are handling situations where:

 

1. The agent is installed on a host and says it is checking in, but it does not appear in the Cortex XDR Console

2. The agent is corrupt and has stopped reporting back (d

...

BrokerVM

Hello, 

 

i'm facing an issue after deleting brokerVm from the console management, i'm not able to add it again, any help for this issue??

 

BR.

NCherbib by L2 Linker
  • 2093 Views
  • 2 replies
  • 0 Likes

Test Custom BIOC Rules

Hi Expert,

 

Please help me to create custom BIOC rules for the testing.

My company want to create rules bioc informational if We create/delete spesific file in spesific folder, and the information will appears in incidents.

Is it possible? 

If is it poss

...

  • 2058 Posts
  • 81 Subscriptions
Top Solution Authors
Top Liked Authors