Manage endpoint tags - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-11-07
Category
Administrator Guide
Abstract

Segment your endpoints according to dynamic tags.

Endpoint tags enable multiple layers of segmentation to your endpoints. An endpoint tag is a dynamic entity that is created and assigned to one or more endpoints. The assigned endpoint tags can then be used to create Endpoint Groups, Policies, and Actions.

Note

The following explanations use Windows operating system installation parameters and Cytool argument examples.

Create an endpoint tag

An endpoint tag can be created during installation of the Cortex XDR agent.

An endpoint tag can be created after installation either from the Cortex XDR agent or from the Cortex XDR management console.

Remove an endpoint tag

Depending on where you created your tag, Server or Agent, you can choose to edit or remove the tags.

Note

If you remove the tag and there are assigned users or user groups with scope settings, this can impact user permissions in the system.

Track your endpoint tags