Set up Overview - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Prevent Administrator Guide

Product
Cortex XDR
License
Prevent
Creation date
2024-07-16
Last date published
2024-12-04
Category
Administrator Guide
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XDR/Cortex-XDR-Documentation
Abstract

Learn more about activating and setting up Cortex XDR Prevent.

Before you can use Cortex XDR Prevent, you must set up and activate the Cortex XDR app and set up related apps and services.

  1. Plan Your Deployment.

  2. Set up Cortex XDR

    1. Activate Cortex XDR.

    2. Assign User Roles and Permissions.

    3. Allocate Log Storage.

  3. Set up Endpoint Protection.

    1. Plan your Cortex XDR agent deployment.

    2. Create Cortex XDR agent installation packages.

    3. Define endpoint groups.

    4. Deploy the Cortex XDR agent to your endpoints.

    5. Configure your endpoint security policy.

  4. (Optional) Set up Outbound Integration.Set up Outbound Integration

    • Integrate with Slack.

    • Integrate with a Syslog Server.

    • Integrate with Cortex XSOAR.

  5. (Optional) Set up Managed Security.

  6. Get started using Cortex XDR.