Who rated this post

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Who rated this post

dfalcon
L4 Transporter

Hi @AhmedSallam 

 

There are quite a few differences between ESM and Cortex XDR.  You get significantly more features in Cortex XDR.  Some differences include:

 

1.  Management server location (Cloud vs on-Prem)

2.  Cortex XDR has more prevention features (Behavior Threat Protection, etc)

3.  Agent communication (Cortex XDR - communicates over internet / ESM - communicates while on network, VPN, or DMZ exposed Core)

4.  EDR capabilities available in Cortex XDR

5.  Cortex XDR has device control features (USB Device control, Host-based firewall, bitlocker support)

6.  Cortex XDR allows response capabilities 

 

WildFire is used in both solutions.  WildFire is cloud-based.  

 


David Falcon 
Solutions Architect, Cortex
Palo Alto Networks® 
Who rated this post