Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4398 Views
  • 0 replies
  • 3 Likes

Device Control - Exception

Dear guru, Currently testing the flexibility of the Device Control Feature under XDR. Aim:Block all the mobile phone connecting to Endpoint except some VIPs. Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so. However, when configuring ...

Endpoint_DeviceControl_Exception.PNG

Resolved! Cortex XDR clean-up activity

Hi All, I have been assigned a task where i need to do cleanup in Cortex xdr, this is specifically for agent clean-up to determine how may more licenses we required.I need to understand what all things I should check and perform. RegardsAsif Siddiqui

AsifSid by L2 Linker
  • 5176 Views
  • 1 replies
  • 0 Likes

Resolved! Auto update XDR agent when new station connects.

Is it possible to automate the endpoint updates so any workstations reporting into Cortex will get upgraded to a minimum version ?Right now we have a query that can check for lower than minimum version and detected devices can be selected to be upgraded, but it's a manual process.(I tried to open a support case, but when choosing Endpoint Protec...

CHKlomp by L2 Linker
  • 7819 Views
  • 1 replies
  • 0 Likes

Auto Scan For External Devices

im looking to enable auto scans for all external devices connected to the endpoint (we use Cortex xdr) For example: If a USB drive gets plugging in it will get auto scanned by XDR. Cant seem to find the location of this setting Please advise,A

Resolved! Cortex XDR for Mac version 7.4.0

HiI am using a MAC with BigSur version 11.4 and Cortex XDR for Mac version 7.4.0Suddenly I am no loger able to debug in Xcode, since the debug server i killed by Cortex.Also when I debug from VSCode in C# I get a notification, but debugging does take place.So basically my Mac is so safe that it is unusable. How can I get solve this?Error message...

I Wants to create new user account in Cortex xdr

Hi All, We have a new requirement where we need to integrate Cortex xdr with IBM Qradar and for this integration I have a IBM guide where it ask to download and install cortex xdr app, which we did, however from Cortex side (in Console) there are few steps which we need to follow like creating a syslog server etc, If anyone has performed this in...

AsifSid by L2 Linker
  • 3025 Views
  • 1 replies
  • 0 Likes

Cortex xdr notification for Licenses

Hi All, I have have received a notification in Cortex console (top right corner) where it says "Your license has expired or exceeded its capacity, Please contact support" We have a license capacity of 6000, I need to understand Is it really the capacity has exceeded? or do I need to do some kind of clean-up to release any unused licenses. Even ...

AsifSid by L2 Linker
  • 3793 Views
  • 1 replies
  • 0 Likes

I want to create a new user account in Cortex xdr

Hi Team, I need to create a new user account in Cortex console, Currently My role is app administrator of the Cortex xdr app (I never created any user account previously) This user account requirement is for the user who will be working on the Integration task (Cirtex xdr integration with Qradar).Can app administrator create new user account in...

AsifSid by L2 Linker
  • 15740 Views
  • 1 replies
  • 0 Likes

macOS Network Filter Causing Issues with shared VM connections

Hi Everyone, We are a new customer for Cortex XDR and the network filter seems to be killing our ability to share a connection to our Windows VM's from our macOS host while using our SonicWall VPN. If the VPN is disconnected connection works fine, when Cortex XDR is uninstalled it also works fine, as soon as Cortex is installed the shared conne...

KTaig by L1 Bithead
  • 6813 Views
  • 6 replies
  • 0 Likes
  • 2610 Posts
  • 98 Subscriptions
Top Solution Authors