Can you disable the ability to use the Live Terminal feature in Cortex XDR?

Question

Options

• AYes, via Agent Settings Profile.
• BNo, it is a required feature of the agent.
• CNo, a separate installer package without Live Terminal is required.
• DYes, via the Cortex XDR console or with an installation switch.

• A
  5% (2)
• B
  3% (1)
• C
  3% (1)
• D
  90% (36)

Explanation

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.7/Cortex-XDR-Agent-Administrator- Guide/Install-the-Cortex-XDR-Agent-Manually You can permanently disable the option for Cortex XDR to perform all, or a combination, of the following actions on endpoints running a Cortex XDR agent: initiate a Initiate a Live Terminal Session remote session on the endpoint, Run Scripts on an Endpoint on the endpoint, and Retrieve Files from an Endpoint from the endpoint to Cortex XDR. Disabling any of these payloads in the Config.xml file is an irreversible action, so if you later want to enable the action on the endpoint, you must uninstall your Cortex XDR agent and install a new agent with the corresponding values in the Config.xml file.

No community discussion yet for this question.