topic Host Firewall Logs in Cortex XDR Discussions

Host Firewall Logs

Marsooq_A — Thu, 09 Jul 2020 07:10:25 GMT

Hi Team,

We have Host firewall profile enabled to block access to some of the IP address.How can we check these logs, if any users tried to access these blocked ip addresses and at what time they tried so. please advise.

Re: Host Firewall Logs

Graeme_Riddell — Wed, 15 Jul 2020 13:16:38 GMT

Hello,

The Cortex Host Firewall integrates with Windows Firewall and therefore it is the Windows Firewall logs at the moment you would need to check.

Kind regards,

Graeme