Reports

Palo Alto Networks Cortex XDR Agent End of Life

Security Software

Find Unsupported Cortex XDR Installations

Cortex XDR Agent is an advanced endpoint security solution part of Palo Alto Networks’ Cortex XDR Platform. It uses behavioral analytics to detect sophisticated threats, provide forensic data and automate threat response, minimizing the impact of attacks..

This report will give you an overview of any Cortex XDR Agents installed in your network, as well as their version and end-of-life date. This way you have an actionable overview of which installs are still supported and which ones need to be updated.

You can read more about the Cortex XDR Agent lifecycle in our Cortex XDR Agent EOL blog post.

Run the Palo Alto Networks Cortex XDR Agent EOL Audit Report

Palo Alto Networks Cortex XDR Agent End of Life Lansweeper Classic Query

Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.Version as OSVersion,
subquery1.Software,
subquery1.Version,
subquery1.Publisher,
subquery1.EOLDate,
Case
When IsDate(subquery1.EOLDate) = 1 and GetDate() < subquery1.EOLDate Then Cast(DateDiff(DAY, GetDate(),
subquery1.EOLDate) As NVARCHAR) + ' days remaining'
End As [Days Remaining],
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When subquery1.EOLDate = 'EOL' then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() > subquery1.EOLDate Then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() >= DateAdd(month, -1, subquery1.EOLDate) Then '#ffd152'
Else '#d4f4be'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select tblSoftwareUni.softwareName As Software,
tblsoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblsoftware.softwareVersion, 4) As int) <= 7 and Cast(ParseName(tblsoftware.softwareVersion, 3) As int) <= 8 Then 'EOL'
When (tblsoftware.softwareVersion Like '7.9%' and
tblsoftware.softwareVersion Not Like '%ce%') Then '2023-09-11'
When (tblsoftware.softwareVersion Like '7.9%' and
tblsoftware.softwareVersion Like '%ce%' and 
tblsoftware.softwareVersion Not Like '7.9.103%') Then '2025-03-19'
When (tblsoftware.softwareVersion Like '7.9.103%' and
tblsoftware.softwareVersion Like '%ce%') Then '2026-12-31'
When tblsoftware.softwareVersion Like '8.0%' Then '2023-12-19'
When tblsoftware.softwareVersion Like '8.1%' Then '2024-04-09'
When tblsoftware.softwareVersion Like '8.2%' Then '2024-08-12'
When (tblsoftware.softwareVersion Like '8.3%' and
tblsoftware.softwareVersion Not Like '%ce%') Then '2024-11-25'
When (tblsoftware.softwareVersion Like '8.3%' and
tblsoftware.softwareVersion Like '%ce%') Then '2026-05-21'
When tblsoftware.softwareVersion Like '8.4%' Then '2025-02-05'
When tblsoftware.softwareVersion Like '8.5%' Then '2025-04-21'
When tblsoftware.softwareVersion Like '8.6%' Then '2025-07-13'
When tblsoftware.softwareVersion Like '8.7%' Then '2025-11-23'
When tblsoftware.softwareVersion Like '8.8%' Then '2026-02-18'
End As EOLDate,
tblsoftware.AssetID
From tblsoftware
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblsoftware.softID
Where tblSoftwareUni.softwareName Like '%Cortex%XDR%') As subquery1 On
subquery1.AssetID = tblAssets.AssetID
Where subquery1.Software Like '%Cortex%XDR%' And tblState.Statename = 'Active'


Union
Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblmacosinfo.SystemVersion As OS,
tblAssets.Version as OSVersion,
subquery1.Software,
subquery1.Version,
subquery1.Publisher,
subquery1.EOLDate,
Case
When IsDate(subquery1.EOLDate) = 1 and GetDate() < subquery1.EOLDate Then Cast(DateDiff(DAY, GetDate(),
subquery1.EOLDate) As NVARCHAR) + ' days remaining'
End As [Days Remaining],
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When subquery1.EOLDate = 'EOL' then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() > subquery1.EOLDate Then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() >= DateAdd(month, -1, subquery1.EOLDate) Then '#ffd152'
Else '#d4f4be'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
inner join tblmacosinfo on tblmacosinfo.AssetID = tblassets.AssetID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select tblSoftwareUni.softwareName As Software,
tblMacApplications.Version As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblMacApplications.Version, 4) As int) <= 7 and Cast(ParseName(tblMacApplications.Version, 3) As int) <= 8 Then 'EOL'
When (tblMacApplications.Version Like '7.9%' and
tblMacApplications.Version Not Like '%ce%') Then '2023-09-11'
When (tblMacApplications.Version Like '7.9%' and
tblMacApplications.Version Like '%ce%' and 
tblMacApplications.Version Not Like '7.9.103%') Then '2025-03-19'
When (tblMacApplications.Version Like '7.9.103%' and
tblMacApplications.Version Like '%ce%') Then '2026-12-31'
When tblMacApplications.Version Like '8.0%' Then '2023-12-19'
When tblMacApplications.Version Like '8.1%' Then '2024-04-09'
When tblMacApplications.Version Like '8.2%' Then '2024-08-12'
When (tblMacApplications.Version Like '8.3%' and
tblMacApplications.Version Not Like '%ce%') Then '2024-11-25'
When (tblMacApplications.Version Like '8.3%' and
tblMacApplications.Version Like '%ce%') Then '2026-05-21'
When tblMacApplications.Version Like '8.4%' Then '2025-02-05'
When tblMacApplications.Version Like '8.5%' Then '2025-04-21'
When tblMacApplications.Version Like '8.6%' Then '2025-07-13'
When tblMacApplications.Version Like '8.7%' Then '2025-11-23'
When tblMacApplications.Version Like '8.8%' Then '2026-02-18'
End As EOLDate,
tblMacApplications.AssetID
From tblMacApplications
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblMacApplications.softid
Where tblSoftwareUni.softwareName Like '%Cortex%XDR%') As subquery1 On
subquery1.AssetID = tblAssets.AssetID
Where subquery1.Software Like '%Cortex%XDR%' And tblState.Statename = 'Active'
Union
Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblLinuxUser.UserName,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblLinuxSystem.OSRelease As OS,
tblAssets.Version as OSVersion,
subquery1.Software,
subquery1.Version,
subquery1.Publisher,
subquery1.EOLDate,
Case
When IsDate(subquery1.EOLDate) = 1 and GetDate() < subquery1.EOLDate Then Cast(DateDiff(DAY, GetDate(),
subquery1.EOLDate) As NVARCHAR) + ' days remaining'
End As [Days Remaining],
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When subquery1.EOLDate = 'EOL' then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() > subquery1.EOLDate Then '#ffadad'
When IsDate(subquery1.EOLDate) = 1 and GetDate() >= DateAdd(month, -1, subquery1.EOLDate) Then '#ffd152'
Else '#d4f4be'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblLinuxSystem On tblLinuxSystem.AssetID = tblAssets.AssetID
Inner Join tblLinuxUser On tblAssets.AssetID = tblLinuxUser.AssetID
Inner Join tblLinuxUserLogon On tblLinuxUserLogon.Id = tblLinuxUser.id
Inner Join (Select tblLinuxUser.AssetId,
Max(tblLinuxUserLogon.LogonTime) As MaxLogontime
From tblLinuxUser
Inner Join tblLinuxUserLogon On tblLinuxUserLogon.Id = tblLinuxUser.id
Group By tblLinuxUser.assetid) As subquery2 On subquery2.MaxLogontime =
tblLinuxUserLogon.LogonTime
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select tblSoftwareUni.softwareName As Software,
tblLinuxSoftware.Version As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblLinuxSoftware.Version, 4) As int) <= 7 and Cast(ParseName(tblLinuxSoftware.Version, 3) As int) <= 8 Then 'EOL'
When (tblLinuxSoftware.Version Like '7.9%' and
tblLinuxSoftware.Version Not Like '%ce%') Then '2023-09-11'
When (tblLinuxSoftware.Version Like '7.9%' and
tblLinuxSoftware.Version Like '%ce%' and 
tblLinuxSoftware.Version Not Like '7.9.103%') Then '2025-03-19'
When (tblLinuxSoftware.Version Like '7.9.103%' and
tblLinuxSoftware.Version Like '%ce%') Then '2026-12-31'
When tblLinuxSoftware.Version Like '8.0%' Then '2023-12-19'
When tblLinuxSoftware.Version Like '8.1%' Then '2024-04-09'
When tblLinuxSoftware.Version Like '8.2%' Then '2024-08-12'
When (tblLinuxSoftware.Version Like '8.3%' and
tblLinuxSoftware.Version Not Like '%ce%') Then '2024-11-25'
When (tblLinuxSoftware.Version Like '8.3%' and
tblLinuxSoftware.Version Like '%ce%') Then '2026-05-21'
When tblLinuxSoftware.Version Like '8.4%' Then '2025-02-05'
When tblLinuxSoftware.Version Like '8.5%' Then '2025-04-21'
When tblLinuxSoftware.Version Like '8.6%' Then '2025-07-13'
When tblLinuxSoftware.Version Like '8.7%' Then '2025-11-23'
When tblLinuxSoftware.Version Like '8.8%' Then '2026-02-18'
End As EOLDate,
tblLinuxSoftware.AssetID
From tblLinuxSoftware
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblLinuxSoftware.SoftwareUniID
Where tblSoftwareUni.softwareName Like '%Cortex%XDR%') As subquery1 On
subquery1.AssetID = tblAssets.AssetID
Where subquery1.Software Like '%Cortex%XDR%' And tblState.Statename = 'Active'
Order By Domain,
AssetName,
Software

Show

Hide

Other reports in this category

Ready to get started?

Explore the full platform, free for 14 days.
No credit card required.

Start free Book a demo
Need help evaluating?
Get guidance on pricing at scale and enterprise requirements.
Talk to sales
Clear pricing as you grow
Transparent plans that scale with your environment.
View plans & pricing