Third-party Linux security applications ↗
| Application Name | Limitations |
|---|---|
| SELinux | Because SELinux collides with the agent injection mechanism, injection-based security modules (ROP Mitigation and Brute Force Protection) are disabled when SELinux is enabled. All other exploit and malware protection functionality works as expected. No user action is required. |
| Symantec | Running Symantec Kernel Module on Linux machines side by side with Cortex XDR is not supported. |
| McAfee | Running McAfee Kernel Module on Linux machines side by side with Cortex XDR will lead to the Cortex XDR agent running without the Kernel Module and be partially protected. It is recommended to have the McAfee KM disabled. |