Agent Settings - Network Location Configuration

[RFeyertag]

Hello dear community, 

what use cases are there for the network Location Configuraiton and is there a simple documentation about this topic?

If there is a connection to the host firewall topic, we have a use case, because our laptops get a public ip on sim card. So wee need to stay secure and block everything which comes from out to inbound.

BR

Rob

[PiyushKohli]

Hi @RFeyertag 

Thank you for writing to live community!
Value defined under Network Location Configuration is used by Host Firewall. To apply location based host firewall rules i.e. Internal/External rules, network location configuration in Agent Settings Profile must be enabled first.

On every heartbeat, and if the Cortex XDR agent detects a network change on the endpoint, the agent triggers the device location test and re-calculates the policy according to the new location.

Cortex XDR determine your device network location based on following 2 tests:

1. A DC Connectivity Test
2. A DNS Test

Shared here at Step 16 for detail information around this test. 

Additionally you may refer to this cortex-xdr-how-to-video-host-firewall

Hope this helps!

Thanks