topic Basic questions to host firewall in Cortex XDR Discussions

Basic questions to host firewall

RFeyertag — Sat, 04 Jan 2025 01:53:24 GMT

Hello dear community,

what is the correct setting for disabling the management of host firewall through Cortex XDR? Why do I wan't that? Because I need to get the windows firewall running through GPOs. Host firewall from PA Cortex is not suitable for agents having public IP on their SIM network card.

What do I need to set up in the extension policy (or somewhere else) to get rid of this message (orange background).

Does this setting disable the management of windows firewall through GPOs?

On the servers we do not have any extension policy set, there we do not have this message.

Is the activated extension policy disabling the manual (GPO) management of the windows firewall?

Rob

Re: Basic questions to host firewall

mavega — Wed, 15 Jan 2025 22:25:17 GMT

Hi,

Thanks for reaching LiveCommunity.

Enabling Host Firewall will automatically disable Windows one.

You can create a Host Firewall profile to disable it and add the devices to your profile so Windows firewall can run in these.

Below details on how to create the profile and rules:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Host-firewall-for-Windows

If this post resolves your doubts please mark it as Solution, thanks.

Re: Basic questions to host firewall

RFeyertag — Sat, 25 Jan 2025 18:26:49 GMT

Thank you, got it!

Rob