block file on specific endpoint cortex agent

Angelicasmm — Wed, 17 Jan 2024 22:44:38 GMT

Hello, I want to block an executable in the Cortex agent configuration but on a specific endpoint. can you help me? thank you

Re: block file on specific endpoint cortex agent

Vinothkumar_SBA — Thu, 18 Jan 2024 07:51:14 GMT

Hi@Angelicasmm,

First, create a new Restrictions profile and add a block list for executable files. The next step is to create the policy and add the newly created Restrictions profile. Select the targeted endpoints. Once you finish the configuration, go to 'All Endpoints,' select the targeted endpoints, and check if the new policy has been assigned or not.

Please check the following link for restriction creation steps: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-Restrictions-Security-Profile.

Hope this answers your query. Please mark the response as "Accept as solution" if it helps.

topic Re: block file on specific endpoint cortex agent in General Topics

block file on specific endpoint cortex agent

Re: block file on specific endpoint cortex agent