Block all internet-facing queries for a specific application in host level firewall for a specific host.

[Prashanta]

Hi family, 

I want to block internet-facing queries for a specific application ( 3Ds max.exe). But there is an option on host firewall for all endpoints. How can configured host firewall rules groups for specific on that endpoint not for all.

Thanks, and regards.

[jmazzeo]

Hi @Prashanta, thanks for reaching us using the Live Community.

The Firewall profiles are managed like the other Endpoint profiles. You create the profile under Endpoints - Policy Management - Extensions - Profiles with the required firewall rules, then this is applied to the endpoints that you select in the target section using any of the usual filters available.

Select the created profile on a Policy Rule:

Select the target using the filters on the top:

In this way, the firewalls rules configured in your profile will apply only to the targeted endpoints.

This is the official doc about using Host Firewall for Windows: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Host-Fi...

If this post aswers your question, please mark it as the solution.