How to prevent ADFSjacking with Cortex XDR. Is it possible?

Just reviewed an article on ADFSjacking in Office365.  Is this something that can be prevented or blocked using Cortex XDR and/or the Advanced Threat Detection or Advanced URL Filtering add-ons for PAN NGFW?  

Cortex XDR Broker VM Connection

Hi,

Does Cortex XDR service on cloud initiate connection to Broker VM? 

Or just broker VM will initiate connection to Cortex XDR service?

I need this information to define whether I need 1 to 1 static NAT on firewall for broker VM or not.

Thank

Cortex XDR Agent Failover

Hi,

I use broker VM for bridging communication between XDR agent and XDR cloud. But the communication can happen only when the agent reside in internal network. Does cortex xdr have mechanism to detect whether inside or outside network? So it can d

Cortex XDR Agent offline notification

Hello Team,

I would like to be notified by email when an XDR Agent goes offline.

However, I could not find a function to notify the agent status.

Do you know of any documentation that explains how to configure the agent status notification functi

Correct Way to Add Cortex Exclusions

Often, we get requests from application admins and their vendors to exclude an application or folder from the anti-virus or security software. In the past, we have entered these requests into the Allow List of the related Malware Profile (which has b

Cortex XDR Host based firewalls visibility

We have Cortex XDR Host Firewall enabled and can see rules are allowing and blocking traffic. What’s the best way to view detailed allow/deny logs? I’m not seeing all activity under host firewall events. Thanks!

edl with checkpoint fw

hi everyone

can i block ip/url with edl that checkpoint fw can reach and underrstand?

thx

Cortex XDR Agent offline notification

Hello Team,

I would like to be notified by email when an XDR Agent goes offline.

However, I could not find a function to notify the agent status.

Do you know of any documentation that explains how to configure the agent status notification function?

R

Cortex XDR email data integration

Hi,

i have integrated email data from Microsoft Graph API to Cortex Collections Integration -> M365, but still there are no phishing emails or suspicious emails being reported as incidents in Cortex. Could you let me know what should be done inorder

Cortex XDR API to get a full CVE list

We are working on an automation task that would like to download the CVE full list under "Vulnerability Assessment" of "Assets" from Cortex XDR menu pane. We would like to try API to download the contents and put it to CSV file format so that we can