Live Terminal uses the WebSocket protocol to communicate with the agent on the endpoint.
WebSocket is a full-duplex communication protocol that enables bidirectional data exchange
between a client and a server over a single TCP connection. WebSocket is designed to be
implemented in web browsers and web servers, but it can be used by any client or server
application. WebSocket provides a persistent connection between the Cortex XDR console and the
endpoint, allowing you to execute commands and receive responses in real time. Live Terminal uses
port 443 for WebSocket communication, which is the same port used for HTTPS traffic. Reference:
Initiate a Live Terminal Session
WebSocket
