Where Can I Install the Cortex XDR Agent?

You can install the Cortex XDR™ and Traps™ agent on supported physical and virtual endpoints.
The Traps™ agent is now the Cortex XDR™ agent in Cortex XDR agent release 7.0 and later releases. The topics below reflect support for both the new Cortex XDR agent and earlier Traps releases.
Palo Alto Networks strives to support the latest major operating systems. After a new operating system is available, there can be a short delay in our support of the operating system as we test interoperability with the production release.
Palo Alto Networks supports operating systems until they reach end-of-life except where noted in each table.
You can install the agent on supported physical and virtual endpoints:

Agent Versions Supported with Cortex XDR

Cortex XDR can communicate with all Traps and Cortex XDR agent releases starting with Traps 5.0. To ensure maximum protection of your endpoints, Palo Alto Networks recommends that you always deploy the latest maintenance release for each agent version.

Mobile Operating Systems Supported with Cortex XDR and Traps

The following table shows the mobile operating systems on which you can install each release of the agent. Google Chromebooks also support all agent versions for Android.
Endpoint Operating System
Traps 5.0
Traps 6.1
Cortex XDR 7.0
Android
5
check-mark.png
check-mark.png
check-mark.png
6
check-mark.png
check-mark.png
check-mark.png
7
check-mark.png
check-mark.png
check-mark.png
8
check-mark.png
check-mark.png
check-mark.png
9
check-mark.png
check-mark.png
check-mark.png
10
check-mark.png
check-mark.png

Endpoint Operating Systems Supported with Cortex XDR and Traps

The following table shows the endpoint operating systems on which you can install each release of the agent. These operating systems are also supported with supported Citrix and VMware virtual applications (see Virtual Applications Supported with Traps™).
Endpoint Operating System
4.2
5.0
6.1
7.0
7.1
Linux
(x86 64-bit only)
To take advantage of all agent protection capabilities on Linux endpoints, you must also install a supported kernel module version in Traps 6.1 and later releases:
Amazon Linux 2 LTS Candidate (2017.12)
check-mark.png
*4.2.1 & later
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Amazon Linux 2 LTS Candidate 2
check-mark.png
*4.2.1 & later
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2017.03
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2017.09
check-mark.png
check-mark.png
check-mark.png
Amazon Linux AMI 2018.03
check-mark.png
check-mark.png
check-mark.png
CentOS 6
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
CentOS 7
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
CentOS 8
check-mark.png
*7.0.1 and later with UEFI secure boot disabled
check-mark.png
*With UEFI secure boot disabled
Debian 8
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Debian 9
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 6
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 7
check-mark.png
check-mark.png
*5.0.1 & later
check-mark.png
check-mark.png
check-mark.png
Oracle 8
check-mark.png
*7.0.1 and later with UEFI secure boot disabled
check-mark.png
*With UEFI secure boot disabled
Red Hat Enterprise Linux 6
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Red Hat Enterprise Linux 7
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Red Hat Enterprise Linux 8
check-mark.png
*7.0.1 and later with UEFI secure boot disabled
check-mark.png
*With UEFI secure boot disabled
SUSE Linux Enterprise Server 11 SP4
check-mark.png
*7.1.1 & later
SUSE Linux Enterprise Server 12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
SUSE Linux Enterprise Server 15 SP1
check-mark.png
*7.0.2 and later with UEFI secure boot disabled
check-mark.png
*With UEFI secure boot disabled
Ubuntu Server 12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 14
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 16
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Ubuntu Server 18
check-mark.png
check-mark.png
check-mark.png
Mac
OS X 10.10
OS X 10.11
check-mark.png
check-mark.png
check-mark.png
macOS 10.12
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
macOS 10.13
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
macOS 10.14
check-mark.png
*5.0.3-h1 & later
check-mark.png
check-mark.png
check-mark.png
macOS 10.15
check-mark.png
*10.15.0 - 10.15.3 is supported by *6.1.2 & later
check-mark.png
*10.15.4 is supported by 7.0.2 & later
check-mark.png
Windows
Windows 2000 and below
Windows XP (32-bit)
(SP2 & earlier)
Windows XP (32-bit)
(SP3 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows XP (64 bit)
Windows Vista
(SP1 & later; FIPS mode)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows 7 RTM
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 7 SP1
(all editions except Home)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded 7
(Standard and POSReady)
check-mark.png
check-mark.png
Windows Embedded 7 SP1
(Standard and POSReady)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 8.0
Windows 8.1
(and with FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded 8.1 Professional
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Embedded POSReady 2009
check-mark.png
check-mark.png
Windows 10 Education
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 Pro
(CB and CBB)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Enterprise
(CB, CBB, and LTSB)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Fall Creators Update 1709
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1803
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1809
(Standard, Enterprise, Professional)
check-mark.png
*4.2.3 & later
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 RS6 Update 1903
(Standard, Enterprise, Professional)
check-mark.png
*4.2.5 & later
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows 10 Update 1909
(Standard, Enterprise, Professional)
check-mark.png
*4.2.6 & later
check-mark.png
check-mark.png
check-mark.png
Windows 10 Enterprise 2019 LTSC
check-mark.png
*4.2.3 & later
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows Server 2003
(SP1 & earlier)
Windows Server 2003 (32-bit)
(SP2 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2003 (64-bit)
Windows Server 2003 R2 (32-bit)
(SP2 & later)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2003 R2 (64 bit)
Windows Server 2008
(All editions; FIPS mode)
check-mark.png
check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2008 R2
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Server 2012
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2012 R2
(All editions; FIPS mode)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2016
(Standard edition; Server with Desktop Experience - previously known as Server with a GUI)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png
Windows Server 2016 Datacenter edition
check-mark.png
*5.0.4 & later
check-mark.png
check-mark.png
check-mark.png
Windows Server 2019
check-mark.png
check-mark.png
check-mark.png
Windows Server Core option
(Windows Server 2012, 2012 R2, and 2016 only)
check-mark.png
check-mark.png
check-mark.png
check-mark.png
check-mark.png

Virtual Applications Supported with Cortex XDR and Traps

The following table shows the supported software vendors you can use to deploy virtual applications and the minimum software version supported with each release of the agent.
Product
Traps 4.2
Traps 5.0
Traps 6.1
Cortex XDR 7.0
Cortex XDR 7.1
Citrix
Citrix Virtual Apps and Desktops
(previously XenApp and XenDesktop)
7.6 and 7.15
7.15 & later
7.13 & later
7.13 & later
7.13 & later
Citrix App Layering
(supports Traps installed on the OS layer)
4
4 & later
4 & later
*6.1.4 & later according to the installation process detailed here here
4 & later
*7.0.0 & later according to the installation process detailed here here
4 & later
*7.1.0 & later according to the installation process detailed here here
VMware
VMware AppVolumes
2.13.1
2.13.1 & later
2.13.1 & later
2.13.1 & later
2.13.1 & later
VMware ThinApp
5.2.2
5.2.2 & later
5.2.2 & later
5.2.2 & later
5.2.2 & later
Windows
Windows Virtual PC

Recommended For You