Host Firewall

[RamyashreeMada]

Hello,

1. Can the Host firewall option be enabled?
2. If enabled, what are the impact?
3. Can this be considered as an alternate option for network segmentation?
4. If enabled, will be there be manual intervention needed to manage the firewall on endpoints?
5. What are the settings and usecases (rules) that can be created for the firewalls?

[neelrohit]

Hi @RamyashreeMada ,

Thank you for writing to live community.

We have couple of discussions on the live community regarding host firewall implementation itself, I think it should help with your queries. 

Kindly review the same:

https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-host-firewall-behavior-questi...

https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/host-firewall/m-p/520019#M3079

[RamyashreeMada]

Hello,

1. What are the primary use-cases (rules) of host-based firewalls? When should we use this feature? Can anyone share any examples/use-cases?
2. Can this be considered as an alternate option for network segmentation?

[neelrohit]

Hi @RamyashreeMada , 

The use cases would vary from organisation to organisation. However, the primordial reason to use it is to enable endpoint level network restriction  the same way as you would do using Windows Firewall. It will be used to restrict applications and services to block network connections to certain destinations or certain ports etc.

As a result, the need to make sure that endpoints are secured on network level if they are not managed via firewalls for network connection makes host firewall a vital feature.

Hope this helps!

Please mark the response as "Accept as solution" if it answers your query