What's the best practice for updating policies? Test in a small group first?

Palo Alto Cortex XDR Reviews

Last Post by bluefox 14 hours ago

1 Posts

1 Users

0 Reactions

1 Views

RSS

bluefox

(@bluefox)

Estimable Member

Joined: 3 weeks ago

Posts: 130

Topic starter 07/08/2026 5:30 pm [#24624]

Just jumped into managing Cortex XDR policies for our team. The power is awesome, but I'm a bit paranoid about pushing a new policy that breaks something.

Is the standard move to always test with a small pilot group first? Like a specific test machine tag? Or do you just rely on the staging features and go for it? Looking for your real-world shortcuts 😅

Quote

Topic Tags