Creation Rules or Policy

J.Lopes279044 — Thu, 02 Jan 2025 08:34:57 GMT

Greatings everybody

I´d like to know how can I create rules or policy for block bitorrent and torrent.

Re: Creation Rules or Policy

nar — Thu, 02 Jan 2025 09:10:36 GMT

Hi @J.Lopes279044

Thanks for your query on LC!

Generally if you are looking at an use case to block something in your infra using XDR there are two ways to do this

1. you may utilize the restrictions profile to block a file based on its name. use wildcard* to generally call all location.
Ref- https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-Restrictions-Security-Profile - You can test it few test endpoints initially, finetune and push to others accordingly.

2. Using a custom BIOC rule and call it under restriction profile. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/BIOC-Rule-Details

Give it a like and mark as solution if this helped.

Best,

topic Re: Creation Rules or Policy in Cortex XDR Discussions

Creation Rules or Policy

Re: Creation Rules or Policy