Learn more about how Cortex XDR regulates licenses.
Cortex XDR regulates licenses according to the available license quota and revocation policy.
Enforcement of Cortex XDR Pro Licenses
For the Cortex XDR Pro license, Cortex XDR limits the number of Pro agents and associated Pro capabilities to the number of agents allocated by the license. You can further refine the endpoints on which you enable Pro features in your agent settings profiles.
After utilizing all available Pro per Endpoint and Cloud per Host licenses, Cortex XDR falls back to a Cortex XDR Prevent policy that protects the endpoint but does not include Pro-specific capabilities. When you exceed the permitted number of Pro and Cloud agents, Cortex XDR displays a notification in the notification area. Cortex XDR permits a small grace over the permitted number but begins enforcing the number of agents after 14 days. If additional Pro agents are required, increase your Cortex XDR Pro per Endpoint license capacity.
To protect a Kubernetes or similar container orchestrator endpoint, Cortex XDR requires a Cortex Cloud per Host license. Cortex XDR auto-identifies if a host is running a container orchestrator and assigns the Cloud per Host license accordingly. Pro per Endpoint licenses can be allocated for Cloud virtual machines up to Pro per Endpoint license capacity. If an endpoint requires a Pro license, and you’ve exceeded the number of available Pro licenses, one of your surplus Cloud per Host licenses is automatically consumed as a Pro per Endpoint license for the endpoint.