Cortex XDR Error Pop-Up in Mac

[Vinothkumar_SBA]

Hello Team,

We have already granted full disk permissions in macOS for Cortex XDR. However, we are still encountering the following popup:

The popup continues to reappear on the machine.

[abdrahman]

Dear @Vinothkumar_SBA , 

Thank you for reaching out to the Live Community. From the screenshot I understand that the issue is with the full disk access permissions. Please follow the steps below to grant full disk access to on the Mac device locally. 

To grant the Cortex XDR agent full disk access locally on the endpoint:

1. Go to System Preferences → Security & Privacy tab, and select Full Disk Access.

2. To make changes, click lock icon on the bottom left, enter your credentials, and Unlock.

3. Navigate to Macintosh HD → Library → Application Support → PaloAltoNetworks → Traps → bin.

4. Select pmd and drag it to the list.

5. Navigate to Macintosh HD → Applications → Cortex XDR.app (Show Package Contents) → Contents → Library → SystemExtensions.

6. Select com.paloaltonetworks.traps.securityextension.systemextension and drag it to the list.

Once done please save the changes and the issue shall be resolved. Please find the documentation on this issue below, thank you: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.7/Cortex-XDR-Agent-Administrator-Guide/Insta...

If the issue persist then please open a support case and our support engineers will be happy to assist you in resolving this issue, thank you. 

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.