Where Can I Install the Cortex XDR Agent?

You can install the Cortex XDR® and Traps™ agent on supported physical and virtual endpoints.
The Traps™ agent is now the Cortex XDR® agent in Cortex XDR agent release 7.0 and later releases. The topics below reflect support for both the new Cortex XDR agent and the earlier Traps releases.
Palo Alto Networks strives to support the latest major operating systems. After a new operating system is available, there can be a short delay in our support of the operating system as we test interoperability with the production release.
Until a Cortex XDR agent release reaches its end-of-life (EoL) status, Palo Alto Networks provides the following support:
  • Microsoft operating systems are supported for three years beyond the end of Microsoft support.
  • Other operating system vendors are supported until they reach end-of-life.
  • The Cortex XDR agents for macOS and 32-bit Windows are not FedRamp compliant.
  • For Android, Palo Alto Networks always supports the latest Cortex XDR agent app that is available on the Google Play Store regardless of the app release date. An agent version that is no longer on Google Play will be supported for one year after the date of its release.
Following the Microsoft advisory regarding the
Deprecation of Software Publisher Certificates, Commercial Release Certificates, and Commercial Test Certificates
:
  • You can install Cortex XDR agent 5.0 versions released after April 15, 2021 only on endpoints running Windows XP, Windows Server 2003, and Windows POSReady 2009. Other operating systems are not supported.
  • To install Cortex XDR agents that were released after April 15, 2021, on endpoints running Windows 7 or 8 editions, you must install update KB4474419 and on endpoints running Windows 2012, you must install update KB3033929.
  • On endpoints running Windows Vista and Windows Embedded Standard 7 (SP0), you can install all Cortex XDR agent 5.0 versions up to and including 5.0.11.
You can install the agent on supported physical and virtual endpoints:

Agent Versions Supported with Cortex XDR

Cortex XDR® can communicate with all Traps™ and Cortex XDR agent releases starting with Traps 5.0. To ensure maximum protection of your endpoints, Palo Alto Networks recommends that you always deploy the latest maintenance version for each agent release.

Mobile Operating Systems Supported with Cortex XDR and Traps

The following table shows the mobile operating systems on which you can install each release of the agent. You can install the Cortex XDR® agent on mobile phones and Google Chromebooks.
Endpoint Operating System
Traps 5.0
Traps 6.1
Cortex XDR 7.0
Cortex XDR 7.1
Android
5
6
7
8
9
10
11
12

Endpoint Operating Systems Supported with Cortex XDR and Traps

The following table shows the endpoint operating systems on which you can install each release of the Cortex XDR® and Traps™ agents. These operating systems are also supported with supported Citrix and VMware virtual applications (see Virtual Applications Supported with Traps™).
Endpoint Operating System
4.2
5.0
6.1
7.0
7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
Linux
(x86 64-bit only)
To take advantage of all agent protection capabilities on Linux endpoints, you must also install a supported kernel module version in Traps 6.1 and later releases:
AlmaLinux 8
Amazon Linux 2 LTS Candidate (2017.12)
*4.2.1 & later
*5.0.1 & later
Amazon Linux 2 LTS Candidate 2
*4.2.1 & later
*5.0.1 & later
Amazon Linux AMI 2017.03
Amazon Linux AMI 2017.09
Amazon Linux AMI 2018.03
CentOS 6
CentOS 7
CentOS 8
*7.0.1 and later
Debian 8
*5.0.1 & later
Debian 9
*5.0.1 & later
Debian 10
*7.1.4 & later
*7.2.3 & later
Debian 11
OpenSuse Leap 15.1
Oracle 6
*5.0.1 & later
Oracle 7
*5.0.1 & later
Oracle 8
*7.0.1 and later
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
*7.0.1 and later
Red Hat Enterprise Linux 9
Support for User Space Agent only
Red Hat Openshift
Rocky Linux 8
SUSE Linux Enterprise Server 11 SP4
*7.1.1 & later
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 15 SP0
*7.0.3 and late
SUSE Linux Enterprise Server 15 SP1
*7.0.2 and late
SUSE Linux Enterprise Server 15 SP2
*7.2.3 & later
SUSE Linux Enterprise Server 15 SP3
Ubuntu Server 12
Ubuntu Server 14
Ubuntu Server 16
Ubuntu Server 18
Ubuntu Server 20
Ubuntu 22.04 LTS
Endpoint Operating System
4.2
5.0
6.1
7.0
7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
Mac
OS X 10.10
OS X 10.11
macOS 10.12
macOS 10.13
macOS 10.14
*5.0.3-h1 & later
macOS 10.15
*10.15.0 & later 10.15 releases are supported by
*10.15.4 & later 10.15 releases are supported by 7.0.2 & later
macOS 10.15.4
macOS 11.X
*7.1.2 & later
macOs 12.X
Endpoint Operating System
4.2
5.0
6.1
7.0
7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
Windows
Due to limitations on Windows Server 2019, Cortex XDR agent will not register with the Microsoft Security Center.
Azure Virtual Desktop (WVD or AVD)
Windows 2000 and below
Windows XP (32-bit)
(SP2 & earlier)
Windows XP (32-bit)
(SP3 & later)
Supported until EOL
Supported until June 1, 2024
Windows XP (64 bit)
Windows Vista
(SP1 & later; FIPS mode)
Supported until EOL
*5.0.11 & earlier
Windows 7 RTM
Windows 7 SP1
(all editions except Home)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Embedded Standard 7
*5.0.11 & earlier
Windows Embedded Standard 7 SP1
Supported until October 2023 (Microsoft EOL + 3 years)
Supported until October 2023 (Microsoft EOL + 3 years)
Supported until October 2023 (Microsoft EOL + 3 years)
Supported until October 2023 (Microsoft EOL + 3 years)
Supported until October 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Embedded POSReady 7
(Based on Windows 7 SP1)
Supported until October 2024 (Microsoft EOL + 3 years)
Supported until October 2024 (Microsoft EOL + 3 years)
Supported until October 2024 (Microsoft EOL + 3 years)
Supported until October 2024 (Microsoft EOL + 3 years)
Supported until October 2024 (Microsoft EOL + 3 years)
Supported until October 2024 (Microsoft EOL + 3 years)
Windows 8.0
Windows 8.1
(and with FIPS mode)
*5.0.11 & earlier
Windows Embedded 8.1 Professional
*5.0.11 & earlier
Windows Embedded POSReady 2009
*5.0.10 & 5.0.11 only, according to the installation process detailed here.
Supported until March 1, 2022
Windows 10 Education
*from 5.0.4 up to and including 5.0.11
Windows 10 Pro
(CB and CBB)
*5.0.11 & earlier
Windows 10 Enterprise
(CB, CBB, and LTSB)
*5.0.11 & earlier
Windows 10 Fall Creators Update 1709
*5.0.11 & earlier
Windows 10 Update 1803
*5.0.11 & earlier
Windows 10 Update 1809
(Enterprise and Professional)
*4.2.3 & later
*from 5.0.4 up to and including 5.0.11
Windows 10 RS6 Update 1903
(Enterprise and Professional)
*4.2.5 & later
*5.0.11 & earlier
Windows 10 Update 1909
(Enterprise and Professional)
*4.2.6 & later
*5.0.11 & earlier
Windows 10 20H2 Update
*6.1.5 & later
*7.1.3 & later
*7.2.1 & later
Windows 10 21H1 Update
*6.1.7 & later
*7.1.4 & later
*7.2.3 & later
*7.3.1 & later
Windows 10 21H2
Windows 10 Update 2004
*6.1.5 & later
Windows 10 Enterprise 2019 LTSC
*4.2.3 & later
*from 5.0.4 up to and including 5.0.11
Windows 10 IoT Core
Windows 10 IoT Enterprise
Windows 11
Windows 11 Home
Windows 11 Pro
Windows 11 Pro Education
Windows 11 Pro for Workstations
Windows 11 Enterprise
Windows 11 Education
Windows 11 IoT Enterprise
Windows Pro
Windows Server Datacenter
Windows Server 2003
(SP1 & earlier)
Windows Server 2003 (32-bit)
(SP2 & later)
Supported until June 1, 2024
Windows Server 2003 (64-bit)
Windows Server 2003 R2 (32-bit)
(SP2 & later)
Supported until June 1, 2024
Windows Server 2003 R2 (64 bit)
Windows Server 2008
(All editions; FIPS mode)
*5.0.11 & earlier
Windows Server 2008 R2 SP1
*5.0.11 & earlier
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Server 2012
(All editions; FIPS mode)
*5.0.11 & earlier
Windows Server 2012 R2
(All editions; FIPS mode)
*5.0.11 & earlier
Windows Server 2016
(Standard edition; Server with Desktop Experience - previously known as Server with a GUI)
*5.0.11 & earlier
Windows Server 2016 Datacenter edition
*from 5.0.4 up to and including 5.0.11
Windows Server 2019
Windows Server Core option
(Windows Server 2012, 2012 R2, and 2016 only)
*5.0.11 & earlier
Windows Server 2019 Standard (Server Core)
*7.2.1 & later
Windows Server 2022

Virtual Applications Supported with Cortex XDR and Traps

The following table shows the supported software vendors you can use to deploy virtual applications and the minimum software version supported with each release of the agent.
Citrix
  • Citrix Virtual Apps and Desktops (previously XenApp and XenDesktop)—7.XX & later on all TRAPS and Cortex XDR agents.
  • Citrix App Layering (supports Traps/Cortex XDR® installed on the OS layer)—4 & later on all TRAPS and Cortex XDR agents according to the installation process detailed here here, with the following agent version exceptions:
    • Only from agent 6.1.4
    • Only from agent 7.4.1
VMware
  • VMware AppVolumes—2.13.1 & later on all TRAPS and Cortex XDR agents according to the installation process detailed here.
  • VMware Horizon View—7.1& later for TRAPS 4.2, 5.0, 6.1, and 7.8 & later for all Cortex XDR agents.
  • VMware ThinApp—5.2.2 & later for all TRAPS and Cortex XDR agents.
Windows

Recommended For You