Where Can I Install the Cortex XDR Agent?

You can install the Cortex XDR™ and Traps™ agent on supported physical and virtual endpoints.
The Traps™ agent is now the Cortex XDR™ agent in Cortex XDR agent release 7.0 and later releases. The topics below reflect support for both the new Cortex XDR agent and earlier Traps releases.
Palo Alto Networks strives to support the latest major operating systems. After a new operating system is available, there can be a short delay in our support of the operating system as we test interoperability with the production release.
Palo Alto Networks supports operating systems until they reach end-of-life except where noted in each table.
You can install the agent on supported physical and virtual endpoints:

Agent Versions Supported with Cortex XDR

Cortex XDR can communicate with all Traps and Cortex XDR agent releases starting with Traps 5.0. To ensure maximum protection of your endpoints, Palo Alto Networks recommends that you always deploy the latest maintenance release for each agent version.

Mobile Operating Systems Supported with Cortex XDR and Traps

The following table shows the mobile operating systems on which you can install each release of the agent. Google Chromebooks also support all agent versions for Android.
Endpoint Operating System
Traps 5.0
Traps 6.1
Cortex XDR 7.0
Android
5
green-check-mark.png
green-check-mark.png
green-check-mark.png
6
green-check-mark.png
green-check-mark.png
green-check-mark.png
7
green-check-mark.png
green-check-mark.png
green-check-mark.png
8
green-check-mark.png
green-check-mark.png
green-check-mark.png
9
green-check-mark.png
green-check-mark.png
green-check-mark.png
10
green-check-mark.png
green-check-mark.png

Endpoint Operating Systems Supported with Cortex XDR and Traps

The following table shows the endpoint operating systems on which you can install each release of the agent. These operating systems are also supported with supported Citrix and VMware virtual applications (see Virtual Applications Supported with Traps™).
Endpoint Operating System
4.2
5.0
6.1
7.0
7.1
Linux
(x86 64-bit only)
To take advantage of all agent protection capabilities on Linux endpoints, you must also install a supported kernel module version in Traps 6.1 and later releases:
Amazon Linux 2 LTS Candidate (2017.12)
green-check-mark.png
*4.2.1 & later
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Amazon Linux 2 LTS Candidate 2
green-check-mark.png
*4.2.1 & later
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Amazon Linux AMI 2017.03
green-check-mark.png
green-check-mark.png
green-check-mark.png
Amazon Linux AMI 2017.09
green-check-mark.png
green-check-mark.png
green-check-mark.png
Amazon Linux AMI 2018.03
green-check-mark.png
green-check-mark.png
green-check-mark.png
CentOS 6
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
CentOS 7
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
CentOS 8
green-check-mark.png
*7.0.1 and later with UEFI secure boot disabled
green-check-mark.png
*With UEFI secure boot disabled
Debian 8
green-check-mark.png
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Debian 9
green-check-mark.png
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Oracle 6
green-check-mark.png
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Oracle 7
green-check-mark.png
green-check-mark.png
*5.0.1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Oracle 8
green-check-mark.png
*7.0.1 and later with UEFI secure boot disabled
green-check-mark.png
*With UEFI secure boot disabled
Red Hat Enterprise Linux 6
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Red Hat Enterprise Linux 7
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Red Hat Enterprise Linux 8
green-check-mark.png
*7.0.1 and later with UEFI secure boot disabled
green-check-mark.png
*With UEFI secure boot disabled
SUSE Linux Enterprise Server 11 SP4
green-check-mark.png
*7.1.1 & later
SUSE Linux Enterprise Server 12
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
SUSE Linux Enterprise Server 15 SP0
green-check-mark.png
*7.0.3 and later with UEFI secure boot disabled
green-check-mark.png
*With UEFI secure boot disabled
SUSE Linux Enterprise Server 15 SP1
green-check-mark.png
*7.0.2 and later with UEFI secure boot disabled
green-check-mark.png
*With UEFI secure boot disabled
Ubuntu Server 12
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Ubuntu Server 14
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Ubuntu Server 16
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Ubuntu Server 18
green-check-mark.png
green-check-mark.png
green-check-mark.png
Mac
OS X 10.10
OS X 10.11
green-check-mark.png
green-check-mark.png
green-check-mark.png
macOS 10.12
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
macOS 10.13
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
macOS 10.14
green-check-mark.png
*5.0.3-h1 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
macOS 10.15
green-check-mark.png
*10.15.0 - 10.15.3 is supported by *6.1.2 & later
green-check-mark.png
*10.15.4 is supported by 7.0.2 & later
green-check-mark.png
Windows
Windows 2000 and below
Windows XP (32-bit)
(SP2 & earlier)
Windows XP (32-bit)
(SP3 & later)
green-check-mark.png
green-check-mark.png
Supported until March 1, 2022
Windows XP (64 bit)
Windows Vista
(SP1 & later; FIPS mode)
green-check-mark.png
green-check-mark.png
Supported until March 1, 2022
Windows 7 RTM
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 7 SP1
(all editions except Home)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Embedded Standard 7
green-check-mark.png
green-check-mark.png
Windows Embedded Standard 7 SP1
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Embedded POSReady 7
(Based on Windows 7 SP1)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 8.0
Windows 8.1
(and with FIPS mode)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Embedded 8.1 Professional
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Embedded POSReady 2009
green-check-mark.png
green-check-mark.png
Supported until March 1, 2022
Windows 10 Education
green-check-mark.png
*5.0.4 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Pro
(CB and CBB)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Enterprise
(CB, CBB, and LTSB)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Fall Creators Update 1709
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Update 1803
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Update 1809
(Standard, Enterprise, Professional)
green-check-mark.png
*4.2.3 & later
green-check-mark.png
*5.0.4 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 RS6 Update 1903
(Standard, Enterprise, Professional)
green-check-mark.png
*4.2.5 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Update 1909
(Standard, Enterprise, Professional)
green-check-mark.png
*4.2.6 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows 10 Update 2004
green-check-mark.png
*6.1.5 & later
green-check-mark.png
green-check-mark.png
Windows 10 Enterprise 2019 LTSC
green-check-mark.png
*4.2.3 & later
green-check-mark.png
*5.0.4 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server 2003
(SP1 & earlier)
Windows Server 2003 (32-bit)
(SP2 & later)
green-check-mark.png
green-check-mark.png
Supported until March 1, 2022
Windows Server 2003 (64-bit)
Windows Server 2003 R2 (32-bit)
(SP2 & later)
green-check-mark.png
green-check-mark.png
Supported until March 1, 2022
Windows Server 2003 R2 (64 bit)
Windows Server 2008
(All editions; FIPS mode)
green-check-mark.png
green-check-mark.png
Supported until Traps 5.0 end-of-life
Windows Server 2008 R2 SP1
green-check-mark.png
green-check-mark.png
green-check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
green-check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
green-check-mark.png
Supported until January 2023 (Microsoft EOL + 3 years)
Windows Server 2012
(All editions; FIPS mode)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server 2012 R2
(All editions; FIPS mode)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server 2016
(Standard edition; Server with Desktop Experience - previously known as Server with a GUI)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server 2016 Datacenter edition
green-check-mark.png
*5.0.4 & later
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server 2019
green-check-mark.png
green-check-mark.png
green-check-mark.png
Windows Server Core option
(Windows Server 2012, 2012 R2, and 2016 only)
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png
green-check-mark.png

Virtual Applications Supported with Cortex XDR and Traps

The following table shows the supported software vendors you can use to deploy virtual applications and the minimum software version supported with each release of the agent.
Product
Traps 4.2
Traps 5.0
Traps 6.1
Cortex XDR 7.0
Cortex XDR 7.1
Citrix
Citrix Virtual Apps and Desktops
(previously XenApp and XenDesktop)
7.6 and 7.15
7.15 & later
7.13 & later
7.13 & later
7.13 & later
Citrix App Layering
(supports Traps installed on the OS layer)
4
4 & later
4 & later
*6.1.4 & later according to the installation process detailed here here
4 & later
*7.0.0 & later according to the installation process detailed here here
4 & later
*7.1.0 & later according to the installation process detailed here here
VMware
VMware AppVolumes
2.13.1
2.13.1 & later
2.13.1 & later
2.13.1 & later
2.13.1 & later
VMware ThinApp
5.2.2
5.2.2 & later
5.2.2 & later
5.2.2 & later
5.2.2 & later
Windows
Windows Virtual PC

Recommended For You