https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-bluetooth-transfer-on-cortex/m-p/534130#M3812 <P><SPAN>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/262549">@RajeshPremSingh</a>,</SPAN></P> <P><SPAN><BR /></SPAN><SPAN>Thank you for writing to Live Community.</SPAN><SPAN><BR /></SPAN><SPAN><BR /></SPAN><SPAN>To answer your question, Cortex XDR does not have an out of the box option to block Bluetooth file transfers. </SPAN></P> <P><SPAN>However, you can </SPAN><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Create-a-BIOC-Rule" target="_blank" rel="noopener"><SPAN>create a new BIOC rule</SPAN></A><SPAN> to identify when processes associated with Bluetooth file transfer such as <EM>obexsrv.exe</EM> and <EM>fsquirt.exe</EM> (if we use Windows as an example)</SPAN> <SPAN>are being run and then create a new </SPAN><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-Restrictions-Security-Profile" target="_blank" rel="noopener"><SPAN>Restrictions Security profile</SPAN></A><SPAN> to block these processes from running based on the&nbsp;<A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Working-with-BIOCs" target="_blank" rel="noopener">custom prevention rule</A>&nbsp;you have created.<BR /><BR /><BR /></SPAN></P> <P><SPAN>Hope this helps!</SPAN><SPAN><BR /></SPAN><SPAN><BR /><BR /></SPAN></P> Sun, 12 Mar 2023 17:59:00 GMT mavraham 2023-03-12T17:59:00Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-bluetooth-transfer-on-cortex/m-p/533755#M3807 <P>Can Bluetooth transfers be blocked on the Cortex XDR? #cortex</P> Thu, 09 Mar 2023 12:30:07 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-bluetooth-transfer-on-cortex/m-p/533755#M3807 RajeshPremSingh 2023-03-09T12:30:07Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-bluetooth-transfer-on-cortex/m-p/534130#M3812 <P><SPAN>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/262549">@RajeshPremSingh</a>,</SPAN></P> <P><SPAN><BR /></SPAN><SPAN>Thank you for writing to Live Community.</SPAN><SPAN><BR /></SPAN><SPAN><BR /></SPAN><SPAN>To answer your question, Cortex XDR does not have an out of the box option to block Bluetooth file transfers. </SPAN></P> <P><SPAN>However, you can </SPAN><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Create-a-BIOC-Rule" target="_blank" rel="noopener"><SPAN>create a new BIOC rule</SPAN></A><SPAN> to identify when processes associated with Bluetooth file transfer such as <EM>obexsrv.exe</EM> and <EM>fsquirt.exe</EM> (if we use Windows as an example)</SPAN> <SPAN>are being run and then create a new </SPAN><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-Restrictions-Security-Profile" target="_blank" rel="noopener"><SPAN>Restrictions Security profile</SPAN></A><SPAN> to block these processes from running based on the&nbsp;<A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Working-with-BIOCs" target="_blank" rel="noopener">custom prevention rule</A>&nbsp;you have created.<BR /><BR /><BR /></SPAN></P> <P><SPAN>Hope this helps!</SPAN><SPAN><BR /></SPAN><SPAN><BR /><BR /></SPAN></P> Sun, 12 Mar 2023 17:59:00 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-bluetooth-transfer-on-cortex/m-p/534130#M3812 mavraham 2023-03-12T17:59:00Z