Traps and Cortex co-existence

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Traps and Cortex co-existence

L2 Linker

 

Thanks in advance for help 

We have few Linux Servers and they have Traps 4.x installed , Traps as you know is previous product of Palo and now its replaced with Cortex XDR .

 

We wanted to remove Traps and install Cortex XDR 7.x . We wanted to know if we can install Cortex without removing Traps ? as in case of some issues in installation of Cortex , Traps would left undisturbed ? so once Cortex is tested we can remove Traps after that ?

1 accepted solution

Accepted Solutions

@Balaraju ,

 

Traps and cortex both perform kernel level injections on the endpoints for credential theft protection. In order to release/perform the kernel injections,endpoints need to drive into kernel loading which happens only during OS boot time. Hence the reboot requirement.

 

Hope that answers your question.

View solution in original post

4 REPLIES 4

L5 Sessionator

Hi @Balaraju ,

 

Cortex XDR is designed with the same fundamentals carried forward and modernised to next generation of detection and prevention solution. Hence both cannot coexist in any circumstance. Practice recommended steps to follow:

  1. Uninstall traps
  2. Reboot the endpoint
  3. Install Cortex XDR
  4. Perform reboot.

Hope this answers your question.

 

Regards,

@neelrohit 

Thanks for your reply . Its very useful . Just one question , is reboot mandatory given its Linux ?

 

Thanks again 

@Balaraju ,

 

Traps and cortex both perform kernel level injections on the endpoints for credential theft protection. In order to release/perform the kernel injections,endpoints need to drive into kernel loading which happens only during OS boot time. Hence the reboot requirement.

 

Hope that answers your question.

L2 Linker

Thanks lot again .

  • 1 accepted solution
  • 1746 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!