Learn about the Cortex® XDR™ broker virtual machine (VM)
and about why use it in your network configuration.
Palo Alto Networks Broker is a secured virtual machine (VM), integrated
with Cortex XDR, that bridges your network and Cortex XDR. By setting
up the broker, you establish a secure connection in which you can
route your endpoints, and collect and forward logs and files for
The Broker can be leveraged for running different services separately
on the VM using the same Palo Alto Networks authentication. Once
installed, the broker automatically receives updates and enhancements
from Cortex XDR, providing you with new capabilities without having
to install a new VM.
Per your Cortex XDR license, the following figure illustrates
the different Broker VM features that could be available on your