Windows version 21H2 - Cortex incompatibility

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Windows version 21H2 - Cortex incompatibility

L4 Transporter



We received a PA notification about Microsoft Windows 10 version 21H2 running on specific hardware architectures are incompatible with a security engine in Cortex XDR agent 7.0.0 – 7.4.0.


In our case we have the following scenario:
- Cortex agent version: 7.4.3 and 7.5.0
- Cortex XDR PRO license (Endpoint protection + behavior analytics)
- Microsoft Windows 20H2 version

At the beginning of the year we plan to upgrade to Windows version 21H2.

We would need to know how this announced incompatibility affects our case and it is necessary to take some action.

On the other hand, we do not quite understand what impact the following paragraph has on us:
While only Windows 10 version 21H2 and higher are incompatible, the Cortex XDR agent will disable the affected security engine in Windows 10 version 20H2, since it must be disabled prior to the upgrade to Windows 10 version 21H2.

What "affected security engine" do you mean?

From the "Impact" section, how does it affect us if the BTP module is disabled?


Can anyone respond to out questions?


L3 Networker

not really adding much value here but I feel the exact same way. I am thinking I should just deploy v7.5.1. I wished that with the cortex versions there was a preferred version like with pan os.

i understand that cortex disables security engine. But this is only in those CORTEX versions?

I think all you can really do is to follow this page for compatibility, looks like it was just updated on 10/14


We have some win11 and 21h2 slowly creeping into our environment, not sure what the official word is on cortex validation for new OS's.

  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!