Learn how to activate Cortex XDR after it has been deployed for your network.
To activate and manage user permissions of your
XDRoperates as a standalone application known as the
CortexGateway allows you to:
- Activate new tenants.
- View and manage granular role-based access control (RBAC) settings.
XDRtenant is a one-time task you’ll need to perform when you first start using
XDR. After you’ve activated your
XDRtenant—and completed all the steps described in Set up Cortex XDR Prevent Overview—you’ll only need to repeat the activation if you want to add additional
The following are prerequisites to activate
- Locate the email that contains your activation information.
To activate your
- Navigate to the activation link you received in email and sign in to begin activation in the Cortex Gateway.As a first user with CSP Super User permissions to access theCortexGateway, you are automatically granted XDR Account Admin permissions to theCortexGateway. With these permissions, you are able to activateCortexXDRtenants, create new roles, and assign permissions to users allocated to your tenant.TheCortexGateway displays tenantsAvailable for ActivationandAvailable Tenants.In theAvailable for Activationsection, you can view all the tenants allocated to your CSP account that are ready for activation. You can review the tenant details, such as license type, number of endpoints, Cortex Data Lake, and purchase date.TheAvailable Tenantssection lists tenants that have already been activated. If you have more than one CSP account, the tenants are displayed according the CSP account name.
- In theAvailable for Activationsection, locate the tenant you want to activate according to the serial number andActivateto launch theTenant Activationwizard.
- In, ensure the tenant you want to activate is allocated to the correct CSP account. You can expandTenant ActivationSelect Support AccountandCortexXDRCortex Data Laketo view the tenants and Cortex Data Lake instances associated within the CSP account.If you manage multiple company CSP accounts, make sure you select the specific account to which you want to allocate theCortexXDRtenant before proceeding with activation. Once activated, the tenant will be associated with the account and cannot be moved.
- In, define the following tenant details.Tenant ActivationDefine Tenant Settings
- Tenant Name—Give yourCortexXDRapp instance an easily-recognizable name. Choose a name that is 59 or fewer characters and is unique across your company account.
- Tenant Subdomain—Give yourCortexXDRinstance an easy to recognize name that is used to access the tenant directly using the full URL (https://<).subdomain>.xdr.<region>.paloaltonetworks.comNote this is a public FQDN, so be careful with sensitive information such as the company name.
- Activateyour tenant.Activation can take up to an hour.CortexXDRsends a notification to your email when the tenant has completed the activation process.
- SelectBack to main gatewayand in theAvailable Tenantsection, search for your tenant name. Hover over a tenant to display theTenant StatusandLicense Details. When the tenant displays anActivestatus, select the tenant name to confirm you can successfully access theCortexXDRmanagement console.You can change your tenant subdomain from oldName.xdr.us.paloaltonetworks.com to newName.xdr.us.paloaltonetworks.com anytime you want, if you have Account Admin or Instance Admin permissions. To change your tenant subdomain name, please open a Palo Alto Networks support ticket.
- Continue to assign user roles and permissions.
Recommended For You
Recommended videos not found.