Before you get started with Cortex® XDR™, review the
deployment considerations for your deployment type.
Before you get started with Cortex® XDR™, plan
New Cortex XDR tenants
Use the to
determine the amount of log storage you need for your Cortex XDR
deployment. Talk to your
Partner or Sales Representative to determine whether you must purchase
additional Cortex Data Lake storage.
region in which you want to host Cortex XDR and any associated services,
such as Cortex Data Lake and Directory Sync Service:
Cortex XDR logs and data remain within the US boundary.
UK—All Cortex XDR logs and data remain within the UK boundary.
EU—All Cortex XDR logs and data remain within the Europe
SG—All Cortex XDR logs and data remain within the Singapore
JP—All Cortex XDR logs and data remain within the Japan boundary.
CA—All Cortex XDR logs and data remain within the Canada
boundary. However, if you have a WildFire Canada cloud subscription,
consider the following:
You can not send file submissions
for bare-metal analysis.
You will not be protected against macOS-borne zero-day threats.
However, you will receive protections against other macOS malware
in regular WildFire updates.
You will not be able to see file submissions in AutoFocus™.
AU—All Cortex XDR logs and data remain within the Australia
IN—All Cortex XDR logs and data remain within the India boundary.
However, if you have a WildFire India cloud subscription, consider
When the Cortex XDR agent identifies
unknown files, Cortex XDR sends the files to the WildFire Singapore
Cloud for analysis. Starting October 2021 Cortex XDR will integrate
with WildFire located in India to allow you to keep all Cortex XDR
Agent WildFire traffic within the Indian boundary.
the migration, WildFire India portal will not display information
for past events that occurred prior to the transition to the new
India cloud location, however, you will still have access to the
WildFire Singapore portal to view the history. In addition, all
information regarding the calculated verdicts, such as the WildFire
verdict and WildFire report, will be available in the Cortex XDR
Cortex XDR Pro per Endpoint
Calculate the bandwidth required to support
the number of agents you plan to deploy. You need 1.2Mbps of bandwidth for
every 1,000 agents. The bandwidth requirement scales linearly so, for
example, to support 100,000 agents, you need to allocate 120Mbps of