Blocking IP via host firewall

PoojalaSreenadh — Wed, 19 Jul 2023 08:55:30 GMT

Hi Team,

Is there a possibility to block specific external domain ip addresses via the cortex xdr host firewall?

Re: Blocking IP via host firewall

nsinghvirk — Thu, 20 Jul 2023 16:52:23 GMT

Thanks for reaching out on LiveCommunity!

With host firewall you can create rules which facilitate you to either allow or block traffic based on protocol, ports and IP addresses. Please follow below guide to create such rules and learn more about Host Firewall.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Host-Firewall

In addition to above XDR also help you to host External Dynamic Lists (EDL) on an external web server that your Palo Alto Networks firewall uses to provide control over user access to IP addresses and domains that the Cortex XDR has found to be associated with an alert. Please refer below guide to learn more about EDLs.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Manage-External-Dynamic-Lists

Re: Blocking IP via host firewall

PoojalaSreenadh — Fri, 21 Jul 2023 05:34:20 GMT

Hi @nsinghvirk ,

Thank you so much for valuable information.

topic Re: Blocking IP via host firewall in Cortex XDR Discussions

Blocking IP via host firewall

Re: Blocking IP via host firewall

Re: Blocking IP via host firewall