Learn more about setting up your endpoint protection.
The Cortex XDR agent monitors endpoint activity and collects endpoint data that Cortex XDR uses to raise alerts. Before you can begin collecting endpoint data, you must enable access, deploy the Cortex XDR agent, and configure endpoint policy. To use endpoint management functions in Cortex XDR you must be assigned an administrative role in the hub.
Verify the status of your Cortex XDR tenant.
From the hub, click the gear icon next to your name.
In the Cortex area, review the STATUS for the tenant you just activated.
When your Cortex XDR tenant is available, the status changes to the green check mark.
(Optional) Set up Proxy Communication.
Customize your Endpoint Security Profiles and assign them to your endpoints.
(Optional) Configure Device Control profiles to restrict access to USB-connected devices.
Install the Cortex XDR agent on your endpoints.
Install the agent software directly on an endpoint or use a software deployment tool of your choice (such as JAMF or GPO) to distribute and install the software on multiple endpoints.
Verify that the Cortex XDR agent can connect to your Cortex XDR instance.
If successful, Cortex XDR displays a Connected status. In your Cortex XDR console, navigate to → to view the status of all your agents.