About RicardoWaffle

Hi all. I am migrating from SEP host firewall to Cortex XDR host firewall. I have an existing rule in SEP to allow EAPoL, I need to know how to set up the same rule in Cortex XDR. In SEP, the protocol is specified as "Ethernet" with a protocol type of "0x888e". Cortex XDR does not have "Ethernet" for a protocol. What protocol do I use in Cortex XDR for this rule? Can I enter in the protocol type in Hex or do I need to convert it? Thanks! ... View more

Hi all.   Does anyone know of a way - or a work around for the following situation.   I have a long list (about 700) IPs that I want to create an alert exclusion from. These are external scanners that our firewall blocks and we get a large amount of alerts because of this. I would like to create an alert exclusion so we no longer have to deal with these cluttering up our console. Manually entering 700 IPs into the Remote IP criteria field is not an option. Is there a way to get all the IPs into that criteria, or a way to silence these alerts in another way? I would prefer not to use CIDR ranges as I need a little more granularity than that.   Thanks! ... View more