Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 742 Views
  • 0 replies
  • 2 Likes

path exclusion for scans do not work

Hello to all,

 

I am experiencing a problem on a machine where scans are pushing the overall CPU load to 100% for several minutes to several hours and only slowly decreasing.

This causes problems for the use of the Syngo.Via software installed on thi

...

CIE integration

In case of hybrid environment,Can we send data to CIE instance from both Azure AD as well as on-prem AD as it supports both.

Or it is enough if we send data only from on-prem AD alone.

Fm12345 by L2 Linker
  • 525 Views
  • 1 replies
  • 0 Likes

XDR Shadow Copy use case

Could someone please share any related documents or use cases for the Shadow Copy in XDR? We have gone through the Administrative guide, but we were unable to find many details about how it works. Additionally, we would like to know how we can backup

...

BrokerVM FQDN configuration impacts?

Hello, 

Regarding BrokerVM FQDN configuration the docs & BrokerVM  configuration page states:
"The Broker VM FQDN settings affect the WEC and Agent Installer and Content Caching."

How does it exactly impact the Agent Installer?

Cortex XDR 

Change Management Server for offline agents

Dear XDR gurus,

We want to change the management server from an old tenant to a new tenant, it is simple for the agents are online by selecting the agent, Alt+Right click and select change management server.

However, it is possible  a way to change m

...

Cytool stops scanning and times out

Hello everyone,

I'm trying to create a gold image in an AWS AppsStream 2.0 environment. I'm following the steps listed here:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.1/Cortex-XDR-Agent-Administrator-Guide/Cortex-XDR-Agent-for-Virtual-E

...

J.Isaias by L1 Bithead
  • 1260 Views
  • 3 replies
  • 0 Likes

Resolved! Defender remains running on Windows 11

Hi Everony

 

We've noticed that under Windows 11 the MS Defender Antivirus remains running in passive mode even after Cortex XDR is installed. The Cortex integration in Windows security center works, but Defender services are still running.

 

Does an

...

Rocky-25 by L2 Linker
  • 2206 Views
  • 3 replies
  • 0 Likes
  • 2276 Posts
  • 86 Subscriptions
Top Solution Authors
Top Liked Authors