Understanding xdr licensing

[dgagnon]

I am reviewing my organizations XDR licenses and noticed that the dashboard seems to be reporting an inaccurate amount of licenses used. We only have 146 endpoints in our environment. We have approximately 125 non-persistent VDI workstations. However, the dashboard shows 520 licenses have been used. When filtering for connected devices, I only see about 130 endpoints. The others show a status of 'disconnected' or 'connection lost'.

Is there a way to have the dashboard properly reflect the number of endpoints?

According to https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-over...  " In the case of non-persistent VDI, the Cortex XDR agent registers with Cortex XDR as soon as the user logs in to the endpoint. "  Does this mean that in a non-persistent VDI environment that licenses get assigned per log on session?

[jcandelaria · Accepted solution]

Hi Dgagnon,

With regards to the vdi, did you use the vdi switch install procedure for this non-persistent vdi? So that way it accurately reflects the actual use of your VDI environment

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-4/cortex-xdr-agent-admin/cortex-xdr-agent-for-...

As for the License dashboard, its the total of connected and disconnected.. once it goes to connection lost state, it doesnt count anymore.. you get your license back.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-over...