Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Discussions

Sorted by:

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Disable Live terminal

Hi Team,

How to disable live terminal access to endpoint

Regards

Marsooq

Scripts/ Download File size limit

I am trying to get a live memory dump from the Endpoints with Cortex XDR agents installed. through a live terminal and the the file explorer, we are limited to 200 MB downloads from the remote host. Is there a way to expand this file size limit or ho

...

cortex-xdr 2.3-how to check scan report

Hi Team,

How to find cortex xdr on-demand scan report and also how to check what was the duration of scan time?

Linux Agent not Reporting in

I have installed Linux agent version 7.1.0.44806 on Ubuntu 16.04 and the agent is not visable under Endpoint Administration. Here is the output of cytool

└──╼ $sudo /opt/traps//bin/cytool startup query
Process name Startup status
authorized Enabled
pmd E

...

How to integrate log to fortigate to Cortex data lake

How to integrate to fortigate logs to Cortex data lake.

Does someone know this?

Cortex XDR Release Guidance

I need to know if Palo Alto created a Cortex Release Guidance for the XDR endpoint agent? I have been burned in the past on what version is installed in my enterprise. Can you please let me know if there is something similar to PAN OS https://live.pa

...

XDR and virtual environment deployment

Hello, everyone.

We're getting ready to incorporate XDR into our VDI infrastructure. Is anyone aware of any version restrictions with vSphere 6 and Horizon view 7.5 and .10? Has anyone had issues with resource consumption as it's deployed more and mo

...

Resolved! Endpoint losing wifi connection every hour

Hello, we have a bizarre issue with one of our endpoints. It's a Macbook Air, 13", 2017, using latest version of macOS and we have identical computers in our organization.

For one user, roughly around the same date Cortex XDR was installed on their

...

Resolved! Quarantine not working

Hi Team

We have enabled quarantine for wildfire and local analysis malware verdict. When initiating malware scan from cortex xdr cloud t, the malware's are getting detected and but those are not getting quarantined.Can anyone advice is this how it wor

...

Failed Login For a Long Username With Special Characters

Wha does this alert means in XDR

Cortex XDR Pro logs to IBM QRadar?

Does anybody have and experience to share on this setup please?

Thanks,

Graeme

New Additions - Cortex XDR

If you haven't explored your tenants this week, check out some of the new additions/interface changes. Under Endpoints > Extensions > Profiles, you will find the configuration interfaces for device control, host-based firewall, and disk encryption.

...