Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
Hello,
We are using Pro Per Endpoint license.
Is that possible to integrate Third party security solution with Cortex XDR.
If it is Yes, Which tool we can integrate as a best practice.
Hello,
Hi Team,
Is there a possibility to block specific external domain ip addresses via the cortex xdr host firewall?
Dear Team ,
We have assigned role to several XDR analyst for incident response but we cannot find Report verdict as Incorrect Option in Key & Artifact section.
My doubt is how can we configure the setting in role section of XDR to enable the Rep
...
I have installed Cortex XDR on my corporate laptop which runs the subjected Linux operating system. I used the DEB package and used below command to install.
sudo dpkg -i <cortex_pacakage>.deb
But after the installation Cortex agent is not runnin
...
In the 7/17 content release notes, improvements have been made to "Suspicious Encrypting File System Remote call (EFSRPC) to domain controller' generated by XDR Analytics BIOC detected on 2 hosts."
By default, the action for this is to detect/alert.
Hello,
After applying Microsoft July 2023 updates to server 2022, Edge no longer works. It opens to a white screen and then crashes. Event Viewer shows a faulting application name; msedge.exe. Windows 10, 11, Server 16, AND 19 all seem to be worki
...How do I block a specific url using edl?
Hi,
Can 2 endpoints have the same endpoint ID, coz we observed 1 endpoint got removed from the console, and upon checking the endpoint ID of the missing endpoint is present on the console but with a different hostname.
Thanks
I am looking to run an XQL query to search for the USB devices being plugged into the environment. Can anyone please help me out so I can figure which USB devices have already been plugged into the environment at the client's office.
#usb #xql query
This email was received from the PA team regarding the new upgrade, but the agent version number appears to be outdated. Please validate and provide further information.
Dear Valued Customer,
We are happy to inform you that the Cortex
How to restrict large file upload in cortex xdr via https or smtp.Need to do size restriction.
Is there a way to force logoff of user during isolation of endpoint? Want to make sure that if computer is infected, it prevents user from logging back in to computer.
Hi everyone,
I configured profile to block all types of devices, and called in profile, it works fine.
Now due to work needs, I want to allow specific USB sticks. I know it's possible to configure a global exception to allow a specific USB device
...
Hello Team,
We have noticed a feature in XDR console as "IP Address Range" under network configurations.
- We need more details on this feature.
- How this feature can we utilized?
- How its is usefull?
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like |
