instructor-led training

(EDU-260) Cortex XDR: Prevention and Deployment

3 Days
Instructor-Led Training
Supported Platforms
Cortex XDR

(EDU-260) Cortex XDR - Prevention and Deployment helps you to :

  • Learn how to investigate attacks through Cortex XDR management console, including the Incidents page and specialized artifact analysis views such as IP View
  • Learn to work with Cortex XDR data-processing capabilities to protect your environment against advanced threats
  • Gain hands-on knowledge about Cortex XDR data-collection capabilities, including Cortex XDR API for ingesting external alerts, and leverage the data to investigate threats
  • Get an introduction to XDR Query Language (XQL)


This course helps participants gain in-depth knowledge about how to configure and manage a Palo Alto Networks Panorama management server. Administrators who complete this course should become familiar with the Panorama management server’s role in managing and securing the overall network. Network professionals will be shown how to use Panorama aggregated reporting to provide themselves with a holistic view of a network of Palo Alto Networks next-generation firewalls.

Target Audience

Security Administrators, Security Operations Specialists, Security Analysts, Security Engineers, and Security Architects


Participants must have completed the Firewall 10.1 Essentials: Configuration and Management (EDU-210) class. Students must be familiar with Palo Alto Networks next-generation firewall management and basic networking concepts, including routing and IP addressing.

Training credit information

Palo Alto Networks Training Credits allow you a single point of purchase for training for use throughout the year. Training credits are redeemable by all employees within an organization for any Palo Alto Networks open enrollment, private on-site, or online course offered by our Authorized Training Partners (ATPs).

Course Modules

  1. Cortex XDR Overview
  2. Cortex XDR Main Components
  3. Cortex XDR Management Console
  4. Profiles and Policy Rules
  5. Malware Protection
  6. Exploit Protection
  7. Cortex XDR Alerts
  8. Tuning Policies Using Exceptions
  9. Response Actions
  10. Basic Agent Troubleshooting
  11. Broker VM Overview
  12. Deployment Considerations

Authorized Training Partners




Europe, Middle East, Africa

Secure Shield

Want updates and announcements?