Create endpoint application groups - Administrator Guide - Cortex XSIAM - Cortex - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-16
Category
Administrator Guide

Data-in-motion rules require the definition of both a source and a destination, which can be specified using your pre-defined endpoint application groups.

Choose the relevant application group type.

  • Catalog Web Application Group: The catalog includes SAAS applications from PAN's predefined catalog and predefined web application categories.

    Note

    The catalog contains a list of all supported and tested applications. If an application you need is not on the list, contact support for assistance.

  • Custom Local Application Group: For this group, select the available options from the pre-defined local applications.

    For example: Unsanctioned chat apps.

  • Custom Web Application Group: For this group, select the available options from the custom local applications. You can create a new web application.

    For example: AI chatbots.