06-16-2021 03:03 AM
Dear all,
In case if anyone will need this info in the future:
We've checked this with the Palo Alto Support and it turned out that, The XDR does not support the fully offline environment.
The XDR requires network communication for the agent management purpose: Cortex XDR for windows - requirements
The Agent installation option for the Content Update package is to reduce the network bandwidth for the initial Agent installation. But the agent must be able to connect to the XDR Cloud for the registration, license allocation, Policy Rule's acquirement and etc. Therefore, the XDR does not support the fully closed network environment.
But we still have some options, and might try reaching out to our SE and ask for deployment options or Palo Alto's account team to submit a New Feature Request (NFR).
Hope this info helps those who seek an answer to the same question 😉
Have a great one!
