Apply Security Profiles to Endpoints

Cortex XDR provides out-of-the-box protection for all registered endpoints with a default security policy customized for each supported platform type. To tune your security policy, you customize settings in a security profile and attach the profile to a policy. Each policy that you create must apply to one or more endpoints or endpoint groups.
  1. From Cortex XDR, create a policy rule.
    Do either of the following:
    • Select
      Endpoints
      Policy Management
      Policy Rules
      + New Policy
      to begin a rule from scratch.
    • Select
      Endpoints
      Policy Management
      Profiles
      , right-click the profile you want to assign and
      Create a new policy rule using this profile
      .
  2. Define a
    Policy Name
    and optional
    Description
    that describes the purpose or intent of the policy.
  3. Select the
    Platform
    for which you want to create a new policy.
  4. Select the desired
    Exploit
    ,
    Malware
    ,
    Restrictions
    , and
    Agent Settings
    profiles you want to apply in this policy.
    security-profile-selection.png
    If you do not specify a profile, the Cortex XDR agent uses the default profile.
  5. Click
    Next
    .
  6. Use the filters to assign the policy to one or more endpoints or endpoint groups.
    Cortex XDR automatically applies a filter for the platform you selected. To change the platform, go
    Back
    to the general policy settings.
  7. Click
    Done
    .
  8. In the
    Policy Rules
    table, change the rule position, if needed, to order the policy relative to other policies.
    The Cortex XDR agent evaluates policies from top to bottom. When the Cortex XDR agent finds the first match it applies that policy as the active policy. To move the rule, select the arrows and drag the policy to the desired location in the policy hierarchy.
    action-center-ordering.gif
    Right-click to
    View Policy Details
    ,
    Edit
    ,
    Save as New
    ,
    Disable
    , and
    Delete
    .

Recommended For You