Cortex XDR Pro License - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro per Endpoint

A comprehensive endpoint protection solution providing multi-layer protection and detection based on the Cortex XDR Prevent license. Utilizing device control, firewall protection, disk encryption, and data collection capabilities, Cortex XDR Pro per Endpoint allows you to effectively block and respond to malware, ransomware, behavioral-based, and exploit attacks.

The license offers tailored endpoint data and third-party logs collection to optimize detection and investigation visibility. For enhanced data collection, the Cortex XDR eXtended Threat Hunting Data (XTH) add-on expands the data collection to allow for more granular threat-hunting operations in your environment.

Cortex XDR Cloud per Host

A Cloud-based endpoint protection and detection license with tailored endpoint and third-party logs data collection. The license also provides Kubernetes support.

Along with the Cortex XDR eXtended Threat Hunting Data (XTH) add-on, you can expand the data collection to allow for more granular threat-hunting operations in your environment.

Cortex XDR Pro per GB

An innovative solution incorporating data ingestion from multiple sources for effective detection, security analytics, and response platform based on the Cortex XDR Pro per Endpoint license.

With the Cortex XDR Pro per GB license, in addition to collecting endpoint data, you can ingest numerous data sources for complete visibility over your network traffic, and user behavior. Applied together with the Cortex XDR Pro per Endpoint license the enhanced endpoint and third-party data ingestion, the Cortex XDR Pro per GB provides streamlined investigation techniques and extensive remediation analysis capabilities.