Who rated this post


Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Who rated this post

L4 Transporter

Hi @AhmedSallam 


There are quite a few differences between ESM and Cortex XDR.  You get significantly more features in Cortex XDR.  Some differences include:


1.  Management server location (Cloud vs on-Prem)

2.  Cortex XDR has more prevention features (Behavior Threat Protection, etc)

3.  Agent communication (Cortex XDR - communicates over internet / ESM - communicates while on network, VPN, or DMZ exposed Core)

4.  EDR capabilities available in Cortex XDR

5.  Cortex XDR has device control features (USB Device control, Host-based firewall, bitlocker support)

6.  Cortex XDR allows response capabilities 


WildFire is used in both solutions.  WildFire is cloud-based.  


David Falcon 
Solutions Architect, Cortex
Palo Alto Networks® 
Who rated this post