Block all internet-facing queries for a specific application in host level firewall for a specific host.

Prashanta — Thu, 14 Mar 2024 04:42:21 GMT

Hi family,

I want to block internet-facing queries for a specific application ( 3Ds max.exe). But there is an option on host firewall for all endpoints. How can configured host firewall rules groups for specific on that endpoint not for all.

Thanks, and regards.

Re: Block all internet-facing queries for a specific application in host level firewall for a specific host.

jmazzeo — Thu, 14 Mar 2024 20:12:29 GMT

Hi @Prashanta, thanks for reaching us using the Live Community.

The Firewall profiles are managed like the other Endpoint profiles. You create the profile under Endpoints - Policy Management - Extensions - Profiles with the required firewall rules, then this is applied to the endpoints that you select in the target section using any of the usual filters available.

Select the created profile on a Policy Rule:

Select the target using the filters on the top:

In this way, the firewalls rules configured in your profile will apply only to the targeted endpoints.

This is the official doc about using Host Firewall for Windows: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Host-Firewall-for-Windows

If this post aswers your question, please mark it as the solution.

topic Re: Block all internet-facing queries for a specific application in host level firewall for a specific host. in Cortex XDR Discussions

Block all internet-facing queries for a specific application in host level firewall for a specific host.

Re: Block all internet-facing queries for a specific application in host level firewall for a specific host.