Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

Cortex XDR Host Firewall behavior Question

L1 Bithead

Hi Everyone,


I am trying to configure host firewall using Cortex XDR, in the documentation, it mentions:


The Cortex XDR host firewall rules leverage the operating system firewall APIs and enforce these rules on your endpoints, but not your Windows or Mac firewall settings.

Device Control • Cortex XDR Prevent Administrator Guide • Reader • Palo Alto Networks documentation ...

Which I understood that it will not affect the Local Windows Firewall.


I proceeded with configuring following the steps, and once I created a profile rule, I got the below message:


You have assigned a non-default HFW profile. This will move control from Windows FW to Cortex HFW and Windows firewall rules will no longer apply (agent version 7.5 and above).


Does this mean that it will disable Windows built-in firewall? Since I willing to run Cortex Firewall to be applied only on external network for certain IPs. Will this disable all the rules applied by Windows Local Firewall?




Who rated this post