Agent Settings - Network Location Configuration

RFeyertag — Tue, 11 Jul 2023 22:02:19 GMT

Hello dear community,

what use cases are there for the network Location Configuraiton and is there a simple documentation about this topic?

If there is a connection to the host firewall topic, we have a use case, because our laptops get a public ip on sim card. So wee need to stay secure and block everything which comes from out to inbound.

Rob

Re: Agent Settings - Network Location Configuration

PiyushKohli — Wed, 12 Jul 2023 06:46:46 GMT

Hi @RFeyertag

Thank you for writing to live community!
Value defined under Network Location Configuration is used by Host Firewall. To apply location based host firewall rules i.e. Internal/External rules, network location configuration in Agent Settings Profile must be enabled first.

On every heartbeat, and if the Cortex XDR agent detects a network change on the endpoint, the agent triggers the device location test and re-calculates the policy according to the new location.

Cortex XDR determine your device network location based on following 2 tests:

A DC Connectivity Test
A DNS Test

Shared here at Step 16 for detail information around this test.

Additionally you may refer to this cortex-xdr-how-to-video-host-firewall

Hope this helps!

Thanks

topic Re: Agent Settings - Network Location Configuration in Cortex XDR Discussions

Agent Settings - Network Location Configuration

Re: Agent Settings - Network Location Configuration