Cortex XDR

[VineethArumulla]

Can I disable the Cortex XDR on anyone of the endpoint(workstation or server) for temporary purpose from the XDR Console.

[neelrohit]

HI  @VineethArumulla , 

Thank you for writing to live community!

As of Cortex XDR agent 7.7 and above, you can pause the Cortex XDR agent protection capabilities on one or more endpoints while maintaining connectivity with the Cortex XDR console. By only pausing the protection and retaining connectivity, the Cortex XDR agent will run with all the profiles disabled, but continue to send data and take actions from the server. After you are ready, you can resume the endpoint protection.

• Navigate to  Endpoints>All Endpoints.
• In the All Endpoints page, select the endpoints you want to pause protection on, right-click and select
  Endpoint Control>Pause Endpoint Protection

[VineethArumulla]

Ok Thanks, If I do agent uninstall from the console, can I reinstall XDR in which I have uninstalled from the console itself.

[neelrohit]

Hi @VineethArumulla ,

Installation action is not applicable from Cortex XDR console and needs to be done manually.

Regards.

[VineethArumulla]

Thanks