https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr/m-p/549558#M4770 <P>How to restrict large file upload in cortex xdr via https or smtp.Need to do size restriction.</P> Mon, 17 Jul 2023 11:17:00 GMT AbdulHameed 2023-07-17T11:17:00Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr/m-p/549558#M4770 <P>How to restrict large file upload in cortex xdr via https or smtp.Need to do size restriction.</P> Mon, 17 Jul 2023 11:17:00 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr/m-p/549558#M4770 AbdulHameed 2023-07-17T11:17:00Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr/m-p/549559#M4771 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/224355">@AbdulHameed</a>&nbsp;,</P> <P>&nbsp;</P> <P>Thank you for writing to live community!</P> <P>&nbsp;</P> <P>We cannot restrict file upload and network activity from Cortex XDR, except for the fact that all the connections associated to the remote host from the source can be restricted using Cortex XDR host firewall rules.&nbsp;</P> <P>Cortex XDR detects these activities on basis of behavioural and sizeable data collected across multiple endpoints to flag as suspicious activity. Network activity traffic restrictions must be done from firewall level only.</P> <P>&nbsp;</P> <P>Hope this helps. Please mark the response as "Accept as Solution" if that answers your query</P> Mon, 17 Jul 2023 11:27:49 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr/m-p/549559#M4771 neelrohit 2023-07-17T11:27:49Z