Cortex XDR Scanning on Exchange and Sharepoint Servers

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Cortex XDR Scanning on Exchange and Sharepoint Servers

L0 Member

Hello,

 

We are looking to add the XDR agent to our on-prem Exchange and Sharepoint servers, and I had two questions about the scanning capabilities of the agent on these servers. 

  1. Does XDR scan emails and attachments that reside on Exchange servers?
  2. Does XDR scan files that are stored on Sharepoint? If an external user posts a document on our public facing sharepoint server, will the XDR agent scan those files, or does it only scan the Sharepoint OS files?

I couldn't find any information in the documentation, so any insights would be appreciated.

 

Thank you

1 REPLY 1

L4 Transporter

Hello @ldonahue 

 

Thanks for reaching out on LiveCommunity!

1. XDR do not support scan of .eml files. For the exchange server, XDR will provide protection like any other endpoint and scan the associated disk spaces within it based on the set schedule of scan.

2. Yes, XDR can scan files stored on Sharepoint's disk space provided that the file format is supported. Scan of files is according to the scan schedule.

Please follow below link to find the list of supported file formats.

https://docs.paloaltonetworks.com/advanced-wildfire/administration/advanced-wildfire-overview/advanc...

 

Please click Accept as Solution to acknowledge that the answer to your question has been provided.

  • 826 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!