Creation Rules or Policy

[J.Lopes279044]

Greatings everybody

I´d like to know how can I create rules or policy for block bitorrent and torrent.

[nar]

Hi @J.Lopes279044 

Thanks for your query on LC!

Generally if you are looking at an use case to block something in your infra using XDR there are two ways to do this

1. you may utilize the restrictions profile to block a file based on its name. use wildcard* to generally call all location. 
Ref-  https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-R... - You can test it few test endpoints initially, finetune and push to others accordingly.

2. Using a custom BIOC rule and call it under restriction profile. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/BIOC-Rule-D... 

Give it a like and mark as solution if this helped.

Best,