Create an Agent Installation Package

To install the Cortex XDR agent on the endpoint for the first time, you must first create an agent installation package. After you create and download an installation package, you can then install it directly on an endpoint or you can use a software deployment tool of your choice to distribute the software to multiple endpoints. To install the Cortex XDR agent, you must use a valid installation package that exists in your Cortex XDR management console. If you delete an installation package, any agents installed from this package are not able to register to Cortex XDR.
After you install the Cortex XDR agent for the first time, you can upgrade individual or batches of agents remotely from the Cortex XDR management console.
To create a new installation package:
  1. From Cortex XDR, select
    Endpoints
    Endpoint Management
    Agent Installations
    .
    agent-installations.png
  2. Create
    a new installation package.
    agent-installation-add-new.png
  3. Enter a unique
    Name
    and an optional
    Description
    to identify the installation package.
    The package
    Name
    must be no more than 32 characters but can contain letters, numbers, or spaces.
  4. Select the
    Package Type
    .
    • Standalone Installers
      —Use for fresh installations and to Upgrade Cortex XDR Agents on a registered endpoint that is connected to Cortex XDR.
    • (
      Windows, macOS, and Linux only
      )
      Upgrade from ESM
      —Use this package to upgrade Traps agents which connect to the on-premise Traps Endpoint Security Manager to Cortex XDR.
  5. Select the
    Platform
    for which you want to create the installation package.
  6. (
    Windows, macOS, and Linux only
    ) Select the
    Agent Version
    for the package.
  7. Create
    the installation package.
    Cortex XDR prepares your installation package and makes it available on the
    Agent Installations
    page.
  8. Download your installation package.
    When the status of the package shows
    Completed
    , right-click the agent version, and click
    Download
    .
    • For Windows endpoints, select between the architecture type.
    • For macOS endpoints, download the
      ZIP
      installation folder and upload it to the endpoint. To deploy the Cortex XDR agent using
      JAMF
      , upload the
      ZIP
      folder to
      JAMF
      . Alternatively, to install the agent manually on the endpoint, unzip the
      ZIP
      folder and double-click the
      pkg
      file.
    • For Linux endpoints, you can download
      .rpm
      or
      .deb
      installers (according to the endpoint Linux distribution), and deploy the installers on the endpoints using the Linux package manager. Alternatively, you can download a
      Shell
      installer and deploy it manually on the endpoint.
      When you upgrade a Cortex XDR agent version without package manager, Cortex XDR will upgrade the installation process to package manager by default, according to the endpoint Linux distribution.
    • For Android endpoints, Cortex XDR creates a tenant-specific download link which you can distribute to Android endpoints. When a newer agent version is available, Cortex XDR identifies older package versions as
      [Outdated]
      .
  9. Next steps:
    As needed, you can return to the
    Agent Installations
    page to manage your agent installation packages. To manage a specific package, right click the agent version, and select the desired action:
    • Edit
      the package name or description.
    • Delete
      the installation package. Deleting an installation package does not uninstall the Cortex XDR agent software from any endpoints. However, if you install the Cortex XDR agent from a package after you delete it, Cortex XDR denies the registration request leaving the agent in an unprotected state. If this is undesirable, you can instead hide the installation package from the main view of the
      Agent Installations
      page. Hiding a package can be useful to filter earlier or less relevant versions from the main view.
    • Copy text to clipboard
      to copy the text from a specific field in the row of an installation package.
    • Hide
      installation packages. Using the Hide option provides a quick method to filter out results based on a specific value in the table. You can also use the filters at the top of the page to build a filter from scratch. To create a persistent filter, save ( save-icon.png ) it.

Recommended For You