Cortex XDR

• Cortex XDR tightly integrates with Cortex XSOAR®, enabling your teams to feed incident data for automated response based on 1,000+ product integrations. XSOAR playbooks can automatically ingest Cortex XDR incidents, retrieve related alerts, and update incident fields in Cortex XDR. It also links insights to incidents in real time, giving you unmatched visibility into the global threat landscape, and automating the distribution of your threat intelligence at scale.

Block Attacks with Best-in-Class Endpoint Detection and Response

• The Cortex XDR agent offers unparalleled protection for exploits, malware, ransomware, and fileless attacks. It includes the broadest set of exploit protection modules available to block malware infections. It enables sharp detection with AI-powered analytics and threat insights. Finally, it allows you to remediate quickly and take control of affected machines.

Securely Manage USB and Bluetooth Devices with Device Control

• The Cortex XDR agent protects your endpoints from malware and data loss by monitoring and managing USB access. You can restrict usage by vendor, type, endpoint, and Active Directory group or user without needing to install another agent on your hosts. Granular policies allow you to assign write or read-only permissions per USB device.
• Bluetooth devices are also a potential vector for data loss from endpoints. Bluetooth Device Control now gives analysts control over Bluetooth devices connecting to endpoints, covering both Bluetooth Classic and Bluetooth Low Energy devices. Admins can set granular policies, like allowing specific Bluetooth devices for productivity, while blocking everything else and stopping potential data loss. This device control capability for Bluetooth further hardens endpoint security posture and prevents unwanted data sharing over Bluetooth channels.

Protect Endpoints with Host Firewall and Disk Encryption

• With host firewall and disk encryption capabilities, you can lower your security risks as well as address regulatory requirements. The Cortex XDR host firewall enables you to control inbound and outbound communications on your Windows and macOS endpoints. Additionally, with disk encryption, you can create rules and policies and apply BitLocker or File Vault encryption on your endpoints. Host firewall and disk encryption capabilities and policies can be centrally configured from the Cortex XDR management console

The XDR Advantage

Host Insights

• Better identify threats andrnvulnerabilities and contain them

Identity Analytics

• Leverage identity and accessrncontext and behavioral analysis

Forensics

• Makes triage and forensicrnanalysis easy and more powerful

Identity Threat Detectionrnand Response

• Manage risk from identityrnthreats and malicious insiders 

eXtended Threat Hunting Data Module (XTH)

• Gain deeper visibility, enable threat hunting, and unlock advanced analytics

Unify Management, Reporting, Triage, and Response in One Intuitive Console

• The management console offers end-to-end support for all Cortex XDR capabilities, including endpoint policy management, detection, investigation, and response. You can quickly assess the security status of your organization’s or individual endpoints with customizable dashboards as well as summarize incidents and security trends with graphical reports that can be scheduled or generated on demand. Public APIs extend management to third-party tools, enabling you to retrieve and update incidents, collect agent information, and contain endpoint threats from the management platform of your choice.

Ease Deployment with Cloud Delivery

• The cloud-native Cortex XDR platform revolutionizes security deployment by eliminating the need for new on-premises log storage or network sensors. At its core is a lightweight agent that can be installed and upgraded without system reboots, minimizing operational disruption. This cloud-first approach provides a scalable and efficient data repository, allowing organizations to easily store and manage security information from multiple sources.

Protecting the Cloud

• Cortex XDR extends its robust protection to cloud environments, supporting both private and public cloud platforms including AWS, Google Cloud, and Microsoft Azure. This versatility ensures consistent security practices across an organization’s entire IT ecosystem, regardless of where assets are hosted. Threats in the cloud are prevented at runtime, detected with analytics tuned for cloud-specific data, and are remediated with cloud-specific response actions. The platform also offers seamless integration with Kubernetes, simplifying deployment to containerized environments and protecting modern, cloud-native applications

Cortex XDR License Capabilities

Next-Generation Antivirus

• Block malware, ransomware, exploits, andrnfileless attacks

Endpoint Protection

• Safeguard endpoints with device control, firewall, and disk encryption

Integrations

• Threat intelligence solutions, Slack, send syslog