Do Palo Alto plan to add endpoint DLP option to the Cortex XDR/Traps offering?

In many cases the firewall based DLP or Prisma Access cloud based DLP is good enough but in some cases like if the web site can't be decrypted or a local corporate site that does not go through the Prisma Access an endpoint DLP is great.

So I hav

Threat Intelligence Feed (IP-Adresses)

Hello!

we have bought a DNS SEC product with a TI Feed (with bad IPs - about 900k). 

How can we integrate this into Cortex XDR? 

It is a textfile, which can be downloaded through a simple link. 

IP1

IP2

...

We need a way to put this IP-Check somewhere on t

Can recognize Signer but not signature

I have a security event, I clicked in and found that the CGO signature is unsigned, but when I create an alert exception, it recognizes the signer, why is that? The signature is not recognized, but the signer can be recognized

Blocking Bluetooth Device in XDR???

Hello, 

Seems XDR - Device control only block USB-related devices on the Endpoint, is it blocking any new Bluetooth devices if the GUID is unknown? 

any ideas?

Cortex XDR 

Cortex xdr did not detect malware, what good is it?

Cortex XDR did not detect malware, what good is it?

I got this scan with mal warebytes.  41 detected.

Cortex Subscription license doubt

We have deployed more than 800 agents in the network. Currently, we have a trial license but they will purchase the license the next month. 

If the actual license will come did we have to again reinstall the agents. 

C:\ProgramData\Cyvera\Prevention folder piling up after installing cortex XDR

Hi Team,

After installing cortex XDR, I can see C:\ProgramData\Cyvera\Prevention folder is getting filled up fast in one of the servers. There are a lot of activities on this server and Traps is catching some malicious activities often. This will def

XdrAgentCleaner Execution Monitoring

Is anyone monitoring XdrAgentCleaner execution? And if so i have a question, lets say when we run the XdrAgentCleaner, before the agent cleans all the Cortex traces, does it sends the EDR telemetry to cloud so in case if XdrAgentCleaner is used malic

Cortex XDR - Ticket system integration or linking options

Hi there,

I am just getting started into what Cortex XDR can do. One item I cannot find a clear answer to so far is how XDR handles alerts forwarding or some API integration between it and, for example, Freshdesk/ServiceNow/Autotask etc.

Is this poss