Cortex XDR P2P

[Suryajith]

Hi,

someone please elaborate XDR P2P how happens and how xdr elect one peer agent in the LAN.

[PiyushKohli]

Hi @Suryajith 

Thank you for writing to live community! Regarding your above query about XDR P2P, for XDR agent to use P2P for upgrades and content updates first it should be enabled under Agent-Settings Profile of your desired Platform in "Download Source" of the required policy.

Regarding your second question Cortex XDR deploys serverless peer-to-peer P2P distribution to Cortex XDR agents in your LAN network by default. Within the six hour randomization window during which the Cortex XDR agent attempts to retrieve the new version, it will broadcast its peer agents on the same subnet twice: once within the first hour, and once again during the following five hours. If the agent did not retrieve the files from other agents in both queries, it will proceed to the next download source defined in your profile.

For your reference you may look at point 14 here for more information.

Hope this helps!

Thanks

[Suryajith]

Hi,

Thank you for the reply