This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4322 Views
  • 0 replies
  • 3 Likes

Resolved! Endpoint ID

Hi, Can 2 endpoints have the same endpoint ID, coz we observed 1 endpoint got removed from the console, and upon checking the endpoint ID of the missing endpoint is present on the console but with a different hostname. Thanks

Resolved! Cortex XDR query.

This email was received from the PA team regarding the new upgrade, but the agent version number appears to be outdated. Please validate and provide further information. Dear Valued Customer, We are happy to inform you that the Cortex XDR agent 7.9.3 maintenance release is scheduled for General Availability (GA) on July 31st, 2023. O...

Regarding the device control function of XDR

Hi everyone, I configured profile to block all types of devices, and called in profile, it works fine. Now due to work needs, I want to allow specific USB sticks. I know it's possible to configure a global exception to allow a specific USB device, but after I added a USB device to Device Permanent Exceptions, it wasn't allowed. A pop-up me...

yuyangab by • L1 Bithead
  • 1979 Views
  • 1 replies
  • 0 Likes

Agent Settings - Network Location Configuration

Hello dear community, what use cases are there for the network Location Configuraiton and is there a simple documentation about this topic? If there is a connection to the host firewall topic, we have a use case, because our laptops get a public ip on sim card. So wee need to stay secure and block everything which comes from out to inbound. ...

RFeyertag_0-1689112764174.png
RFeyertag by • L4 Transporter
  • 3600 Views
  • 1 replies
  • 0 Likes

Resolved! Upgrade XDR Agent

Hi, We are trying to uninstall and install XDR on a Windows server but getting a prompt during uninstallation that reboot is required. Will reboot be necessary after uninstallation? Regards, Shahwaz

Resolved! About XDR Cloud Compliance

Hello dear community, We noticed a feature called Cloud Compliance on Cortex XDR, but we don't see any details. What is this feature related to and from where to collect data? Is there any documentation available about this feature since I couldn't find any related instructions in the help center? Thanks.

Chilla by • L1 Bithead
  • 2409 Views
  • 1 replies
  • 0 Likes

Mobile Phone Device Restriction on MacOS

Hello all, I am currently looking into creating a Device Restriction Policy in which I block a physical connection of a Mobile Phone to MacOS endpoint. Once blocked I would expect to receive an alert on the Device Policy Violation page. Is this possible? In regards to Windows endpoints, this works seamlessly as expected and the device is recog...

Resolved! Disappearing XDR Endpoints for iOS and Android

Hi There, We've got the XDR Agent for mobile devices deployed in our environment for both Android and iOS. I've noticed after some time these devices stop checking in with Cortex in the Endpoints dashboard. The devices will first say 'disconnected' then 'connection lost' etc. Funny thing is, they seem to stay upgraded in terms of versions. ...

Resolved! Cloud identity engine - Logs collection

Hi Community, Good day! We are unable to see the logs in the Cloud identity engine log viewers. if possible, Could you please suggest a way to get logs from the Directories? Thanks in advance. Cortex XDR Cloud Identity Engine Cloud Identity Engine

  • 2587 Posts
  • 95 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks