Cortex XDR content update

[Marsooq_A]

Hi Team,

How to check and find cortex xdr content update release date? Cloud portal only showing the version and how to manually push the content update to some selected endpoints?

[Ryan_Saulsbury]

I believe this is what you are looking for:

https://live.paloaltonetworks.com/t5/cortex-xdr-articles/content-release-notes/ta-p/257570

[Marsooq_A]

@Ryan_Saulsbury 

What you provide is informative, But this is not showing the content version, how do i match this with our agents?

[MartinCimone]

Have you tried to "Subscribe to Content Update Emails" in Palo Alto Support Account Preferences?

https://support.paloaltonetworks.com/SupportAccount/Preferences

Maybe that will be what you are looking for.

Have a great day.

[Marsooq_A]

I was not subscribed.

[jairo.jaramillo]

I am walking trough the same problem. Trying to match up de CU with the date and also with the agent , and is not do friendly. This is really a downside of XDR.

[PiyushKohli]

Hi @Marsooq_A and @jairo.jaramillo 

For Cortex XDR related updates you may subscribe to "Subscribe to Traps Software Update Emails" and "Subscribe to Traps Content Update Emails" as shared by Martin Cimone here.

Additionally, to check for Content Version you may also check it under Dynamic Updates in Updates Section as shared in the below screenshot. 

In the drop down under Content type select Traps. and then you may see the Content version and release notes.

Note: Release notes is only for the major version updates.

Lastly regarding query on how to manually push the content update to some selected endpoints. You can force the Cortex XDR agent to connect to the server using one of the following methods.
     1. (Windows and Mac only) Perform manual check-in from the Cortex XDR agent console.
     2. Initiate a check-in using the Cytool checkin command.

Reference: About-Content-Updates

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Thank You