Giving permissions to Cortex Agent on MacOS

Allow Cortex XDR to install system extensions: (macos 10.13 and later) 

1. Dismiss the  System Extension Blocked warning.

2. Go to System Preferences > Security & Privacy > General and select Allow

Grant full disk access (required for macOS 10.15 and later) 

1. Go to System Preferences > Security & Privacy > Privay Tab  and select Full Disk Access

2. Click the lock button in the bottom left to make changes. You should be prompted to enter your credentials. Your Network ID should work fine for this. 

3.  Navigate to Macintosh HD > Library > Application Support > PaloAltoNetworks   > Traps > bin

4. Select trapsd, authorized, and pmd.   

                                                                                                                                                                                                    

5. When finished, click the lock again to save changes.