cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

Hi @AhmedSallam 

 

There are quite a few differences between ESM and Cortex XDR.  You get significantly more features in Cortex XDR.  Some differences include:

 

1.  Management server location (Cloud vs on-Prem)

2.  Cortex XDR has more prevention features (Behavior Threat Protection, etc)

3.  Agent communication (Cortex XDR - communicates over internet / ESM - communicates while on network, VPN, or DMZ exposed Core)

4.  EDR capabilities available in Cortex XDR

5.  Cortex XDR has device control features (USB Device control, Host-based firewall, bitlocker support)

6.  Cortex XDR allows response capabilities 

 

WildFire is used in both solutions.  WildFire is cloud-based.  

 


David Falcon 
Senior Solutions Architect, Cortex
Palo Alto Networks® 
Who rated this post