Where Can I Install the Cortex XDR Agent?

You can install the Cortex XDR and Traps agent on supported physical and virtual endpoints.
The Traps agent is now the Cortex XDR agent in Cortex XDR agent release 7.0 and later. The topics below reflect support for both the new Cortex XDR agent and earlier Traps releases.
Palo Alto Networks strives to support the latest major operating systems. After a new operating system is available, there can be a short delay in our support of the operating system as we test interoperability with the production release.
Palo Alto Networks supports operating systems until they reach end-of-life except where noted in each table.
You can install the agent on supported physical and virtual endpoints:

Agent Versions Supported with Cortex XDR

The following table displays the minimum agent versions supported with Cortex XDR:
Agent Version
Minimum Supported
Traps agent 5.0
5.0.8
Traps agent 6.0
Traps agent 6.1
6.1.4
Cortex XDR agent 7.0
7.0.0

Mobile Operating Systems Supported with Cortex XDR and Traps

The following table shows the mobile operating systems on which you can install each release of the agent.
Endpoint Operating System
Traps 5.0
Traps 6.0
Cortex XDR 7.0
Android
5
check-mark.png
check-mark.png
check-mark.png
6
check-mark.png
check-mark.png
check-mark.png
7
check-mark.png
check-mark.png
check-mark.png
8
check-mark.png
check-mark.png
check-mark.png
9
check-mark.png
check-mark.png
check-mark.png
10
check-mark.png
check-mark.png

Endpoint Operating Systems Supported with Cortex XDR and Traps

The following table shows the endpoint operating systems on which you can install each release of the agent. These operating systems are also supported with supported Citrix and VMware virtual applications (see Virtual Applications Supported with Traps).
Endpoint Operating System
Traps 4.2
Traps 5.0
Traps 6.0
Traps 6.1
Cortex XDR 7.0
Linux
(x86 64-bit only)
Amazon Linux 2 LTS Candidate (2017.12)
check-mark.png
*4.2.1 & later
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Amazon Linux 2 LTS Candidate 2
check-mark.png
*4.2.1 & later
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2017.03
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2017.09
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2018.03
check-mark.png
check-mark.png
check-mark.png
CentOS 6
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
CentOS 7
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
CentOS 8
check-mark.png
*7.0.1 only and with UEFI secure boot disabled
Debian 8
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Debian 9
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 6
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 7
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 8
check-mark.png
*7.0.1 only, and with UEFI secure boot disabled
Red Hat Enterprise Linux 6
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Red Hat Enterprise Linux 7
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Red Hat Enterprise Linux 8
check-mark.png
*7.0.1 release only, and with UEFI secure boot disabled
SUSE Linux Enterprise Server 12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 14
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 16
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 18
check-mark.png
check-mark.png
check-mark.png
Mac
OS X 10.10
OS X 10.11
check-mark.png
check-mark.png
check-mark.png
check-mark.png
macOS 10.12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
macOS 10.13
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
macOS 10.14
check-mark.png
*5.0.3-h1 & later
check-mark.png
check-mark.png
check-mark.png
macOS 10.15
check-mark.png
Windows
Windows 2000 and below
Windows XP (32-bit)
(SP2 & earlier)
Windows XP (32-bit)
(SP3 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows XP (64 bit)
Windows Vista
(SP1 & later; FIPS mode)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows 7
(RTM and SP1; FIPS mode; all editions except Home)
SHA2 code signing supported with Microsoft Security Advisory 3033929
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded 7
(Standard and POSReady)
check-mark.png
check-mark.png
Windows Embedded 7 SP1
(Standard and POSReady)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 8.1
(and with FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded 8.1 Professional
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded POSReady 2009
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Education
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 Pro
(CB and CBB)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Enterprise
(CB, CBB, and LTSB)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Fall Creators Update 1709
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1803
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1809
(Standard, Enterprise, Professional)
check-mark.png
*4.2.3 & later
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 RS6 Update 1903
(Standard, Enterprise, Professional)
check-mark.png
*4.2.5 & later
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1909
(Standard, Enterprise, Professional)
check-mark.png
*4.2.6 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 Enterprise 2019 LTSC
check-mark.png
*4.2.3 & later
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows Server 2003
(SP1 & earlier)
Windows Server 2003 (32-bit)
(SP2 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2003 (64-bit)
Windows Server 2003 R2 (32-bit)
(SP2 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2003 R2 (64 bit)
Windows Server 2008
(All editions; FIPS mode)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2008 R2
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Server 2012
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2012 R2
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2016
(Standard edition; Server with Desktop Experience - previously known as Server with a GUI)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2016 Datacenter edition
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows Server 2019
check-mark.png
*6.0.1 & later
check-mark.png
check-mark.png
Windows Server Core option
(Windows Server 2012, 2012 R2, and 2016 only)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png

Virtual Applications Supported with Cortex XDR and Traps

The following table shows the supported software vendors you can use to deploy virtual applications and the minimum software version supported with each release of the agent.
Product
Traps 4.2
Traps 5.0
Traps 6.0
Traps 6.1
Cortex XDR 7.0
Citrix
Citrix XenApp
7.6 and 7.15
7.15 & later
7.15 & later
7.13 & later
7.13 & later
Citrix App Layering
(supports Traps installed on the OS layer)
4
4 & later
4 & later
4 & later
*6.1.4 & later according to process detailed below
4 & later
*7.0.0 & later read according to process detailed below
VMware
VMware AppVolumes
2.13.1
2.13.1 & later
2.13.1 & later
2.13.1 & later
2.13.1 & later
VMware ThinApp
5.2.2
5.2.2 & later
5.2.2 & later
5.2.2 & later
5.2.2 & later
Windows
Windows Virtual PC
* Cirtix App Layering (previously Unidesk) - Due to a Citrix App Layering limitation, you must install the Cortex XDR agent on the OS layer according to this flow to enable the Cortex XDR agent provide full protection to your endpoints:
  1. Install the Cortex XDR agent on OS layer during App Layering image preparation process, as a Terminal session, VDI or Standard installation.
    Cortex XDR agent installations on the Application layer or User layer are not supported.
  2. Before you finalize the OS layer, stop the Cortex XDR agent with the
    Cytool runtime stop
    command.
  3. Delete the
    c:\ProgramData\Cyvera\LocalSystem\Download\content
    folder.
  4. Delete the
    c:\ProgramData\Cyvera\LocalSystem\Persistence\cloud_frontend_db
    folder.
  5. Add the following entry to the Registry:
    HKLM\SYSTEM\CurrentControlSet\Services\Unirsd\ExcludeKey [REG_SZ] = "\Registry\Machine\System\Cyvera"
  6. Do not boot up the OS layer before it is finalized.

Recommended For You