The Palo Alto Networks Broker is a secured virtual machine (VM), integrated with Cortex XDR/Cortex XSIAM, that bridges your network and the Cortex product. By setting up the broker, you establish a secure connection in which you can route your endpoints, and collect and forward logs and files for analysis.