Activate

Learn how to activate Cortex XDR after it has been deployed for your network.
To activate and manage user permissions of your
Cortex
XDR
tenants,
Cortex
XDR
operates as a standalone application known as the
Cortex
Gateway.
The
Cortex
Gateway allows you to:
  • Activate new tenants.
  • View and manage existing tenants and tenants available for activation that are allocated to your Customer Support Portal (CSP) account.
  • View and manage granular role-based access control (RBAC) settings.
The sizing calculator is managed on the hub.
Activating a
Cortex
XDR
tenant is a one-time task you’ll need to perform when you first start using
Cortex
XDR
. After you’ve activated your
Cortex
XDR
tenant—and completed all the steps described in Set up Cortex XDR Prevent Overview—you’ll only need to repeat the activation if you want to add additional
Cortex
XDR
tenants.
The following are prerequisites to activate
Cortex
XDR
:
  • Locate the email that contains your activation information.
  • Ensure you have CSP Super User role permissions to your existing administrator accounts. This role cannot be removed or changed through the
    Cortex
    Gateway.
To activate your
Cortex
XDR
tenant:
  1. Navigate to the activation link you received in email and sign in to begin activation in the Cortex Gateway.
    As a first user with CSP Super User permissions to access the
    Cortex
    Gateway, you are automatically granted XDR Account Admin permissions to the
    Cortex
    Gateway. With these permissions, you are able to activate
    Cortex
    XDR
    tenants, create new roles, and assign permissions to users allocated to your tenant.
    The
    Cortex
    Gateway displays tenants
    Available for Activation
    and
    Available Tenants
    .
    In the
    Available for Activation
    section, you can view all the tenants allocated to your CSP account that are ready for activation. You can review the tenant details, such as license type, number of endpoints, Cortex Data Lake, and purchase date.
    The
    Available Tenants
    section lists tenants that have already been activated. If you have more than one CSP account, the tenants are displayed according the CSP account name.
  2. In the
    Available for Activation
    section, locate the tenant you want to activate according to the serial number and
    Activate
    to launch the
    Tenant Activation
    wizard.
  3. In
    Tenant Activation
    Select Support Account
    , ensure the tenant you want to activate is allocated to the correct CSP account. You can expand
    Cortex
    XDR
    and
    Cortex Data Lake
    to view the tenants and Cortex Data Lake instances associated within the CSP account.
    If you manage multiple company CSP accounts, make sure you select the specific account to which you want to allocate the
    Cortex
    XDR
    tenant before proceeding with activation. Once activated, the tenant will be associated with the account and cannot be moved.
  4. In
    Tenant Activation
    Define Tenant Settings
    , define the following tenant details.
    • Tenant Name
      —Give your
      Cortex
      XDR
      app instance an easily-recognizable name. Choose a name that is 59 or fewer characters and is unique across your company account.
    • Region
      —Select a region in which you want to set up your
      Cortex
      XDR
      instance.
    • Tenant Subdomain
      —Give your
      Cortex
      XDR
      instance an easy to recognize name that is used to access the tenant directly using the full URL (
      https://<
      subdomain
      >.xdr.<
      region
      >.paloaltonetworks.com
      ).
      Note this is a public FQDN, so be careful with sensitive information such as the company name.
    • Review and
      agree to the terms and conditions of the Privacy policy, Term of Use, EULA
      .
  5. Activate
    your tenant.
    Activation can take up to an hour.
    Cortex
    XDR
    sends a notification to your email when the tenant has completed the activation process.
  6. Select
    Back to main gateway
    and in the
    Available Tenant
    section, search for your tenant name. Hover over a tenant to display the
    Tenant Status
    and
    License Details
    . When the tenant displays an
    Active
    status, select the tenant name to confirm you can successfully access the
    Cortex
    XDR
    management console.
    You can change your tenant subdomain from oldName.xdr.us.paloaltonetworks.com to newName.xdr.us.paloaltonetworks.com anytime you want, if you have Account Admin or Instance Admin permissions. To change your tenant subdomain name, please open a Palo Alto Networks support ticket.

Recommended For You