Palo Alto Networks Cortex XDR — a cloud-based endpoint protection solution that combines data from various sources, including network traffic, servers, cloud services, and 3rd-party applications. With a centralized platform and integration with the Palo Alto Networks ecosystem, Cortex XDR provides effective attack detection, analysis automation, and threat blocking.
The solution combines telemetry from various sources, uses machine learning models that allow you to detect new and unknown threats, analyze their impact, and respond quickly to incidents, and also supports integration with security management systems (SIEM, SOAR, etc.).
Functional features
Isolating compromised endpoints for further analysis
Managing built-in firewall policies
Ability to remotely encrypt a disk using specified parameters
Ability to connect to the endpoint from a terminal
Antivirus software with an artificial intelligence module to detect new threats
Ability to automatically recover systems after an incident
Benefits of the solution:
- Ability to deploy the agent on Windows, Linux, MacOs, Android, iOS/iPadOS, cloud and kubernetes environments, as well as virtualized applications (VMware AppVolumes, Horizon View, ThinApp, Citrix Virtual Apps and Desktops, Windows Virtual PC)
- Control and monitor the use of USB devices
- Integration with AutoFocus Threat Intelligence and Wildfire to detect new and unknown threats
- Analysis of processes and actions performed on endpoints to detect anomalies
- Integration with the unified Palo Alto Networks ecosystem
- Detection and automatic prevention of ransomware and 0-day threats
- Protection against fileless attacks that use only memory without writing to disk
- Live Terminal allows cyber security professionals to remotely connect to a device without disrupting end users, run Python, PowerShell or system commands and scripts directly on endpoints for threat response, recovery or system administration, etc.
- Identity Analytics detects compromised accounts using user behavior analytics
Cortex XDR provides comprehensive endpoint protection by combining telemetry from various devices, behavioral analysis, USB device control, firewall settings, malware detection and blocking. With a centralized platform and integration with the Palo Alto Networks ecosystem, Cortex XDR provides effective attack detection, threat response automation, and rapid system recovery.
A brief overview of Palo Alto Networks' Cortex XDR solution can be viewed in a video presentation on our YouTube channel. Watch it here:
Entrust the security of your business to professionals! Get a free consultation from experts Seeton:
Get a consultation
Always in touch to ensure the continuity of your business!
Learn more and get consultation from Seeton Cyber Security Group!
PARTNER:
