Broker VM Overview - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2024-07-16
Last date published
2024-10-01
Category
Administrator Guide
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XDR/Cortex-XDR-Documentation
Abstract

Learn about the Cortex XDR Broker virtual machine (VM) and why use it in your network configuration.

The Palo Alto Networks Broker is a secured virtual machine (VM), integrated with Cortex XDR, that bridges your network and Cortex XDR. By setting up the broker, you establish a secure connection in which you can route your endpoints, and collect and forward logs and files for analysis.

The Broker can be leveraged for running different services separately on the VM using the same Palo Alto Networks authentication. Once installed, the Broker VM automatically receives updates and enhancements from Cortex XDR, providing you with new capabilities without having to install a new VM.

broker-vm-overview.png

Per your Cortex XDR license, the following figure illustrates the different Broker VM features that could be available on your organization side.

cortex-xdr-broker-service.png