Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

L4 Transporter

Hi CraigV123,


With Cortex XDR Prevent, only the XDR Agent information can be ingested into XDR console, an XDR Pro license allows you to ingest alerts from 3rd party sources (including NGFW) and a Pro per TB license allows you to ingest the raw logs.  Please refer to this doc page with detailed information on capabilities per license type (


Correction: You can use the AD integration feature to bring in data from AD for alerts and incidents.  It's the Identity Analytics that you won't be able to utilize.  Check out for information on configuring this.

View solution in original post

Who rated this post