Create endpoint application groups - Administrator Guide - Cortex - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-11
Category
Administrator Guide

Data-in-motion rules require the definition of both a source and a destination, which can be specified using your pre-defined endpoint application groups.

Choose the relevant application group type.

  • Catalog Web Application Group: The catalog includes SAAS applications from PAN's predefined catalog and predefined web application categories.

    Note

    The catalog contains a list of all supported and tested applications. If an application you need is not on the list, contact support for assistance.

  • Custom Local Application Group: For this group, select the available options from the pre-defined local applications.

    For example: Unsanctioned chat apps.

  • Custom Web Application Group: For this group, select the available options from the custom local applications. You can create a new web application.

    For example: AI chatbots.