Release Highlights

The Cortex XDR 3.12 and Cortex XDR Agent 8.6 release includes the following highlights:

FEATURE	DESCRIPTION
New Enterprise Multi-Tenant & MSSP licensing model	Introducing a new Enterprise Multi-Tenancy and Managed Security Service Providers (MSSPs) licensing model for Cortex XDR, streamlining the license management and monetization of child tenants. The new license allows MSSPs to own and manage child tenants on demand directly from the Gateway, in addition to the existing MSSP model. For Enterprise Multi-Tenancy administrators, the model provides a productized data segregation solution, offering greater flexibility when managing different business units.
Enhanced Palo Alto Networks NGFW integration process	To streamline Palo Alto Networks NGFW Integrations, Cortex XDR now supports the onboarding of NGFW from multiple CSP accounts. Customers with multiple accounts can connect all of their accounts into a single Cortex tenant, ensuring the completeness of their data and also leverage the capabilities we offer through our native collector.
Windows support for Cortex XDR agent for Cloud	The Prisma cloud vulnerability and compliance scanner integrated with the Cortex XDR agent now provides a unified agent that gives runtime security including vulnerability and compliance for Windows, matching the functionality on Linux-based operating systems. Windows Cortex XDR agent's security alerts and vulnerability data are now seamlessly forwarded and displayed in the Prisma console, enhancing comprehensive cloud security management without requiring special configuration.
AI-powered PowerShell examination	AI-based PowerShell script examination is now available in the Windows Malware Profile as part of our local analysis, providing additional security measures and flexibility to block, quarantine, or report malicious files.
Streamlined control over Linux operational mode	The Agent Operation Mode setting in the Linux Agent Settings Profile is available now, enabling administrators to select a Userspace fallback mode when Kernel Mode is unavailable. This fallback mode allows administrators to balance performance and stability according to their needs while enhancing customization and control over agent operations.