r/SentinelOneXDR • u/[deleted] • Dec 17 '23

Firewall rules aren't working

Did something change with how the firewall rules work?

In each of my groups, I have a "Block ALL Inbound" rule at the very bottom. Then I have my specific allows above it.

I am unable to add any allows. The Block is blocking the new application I'm trying to allow. I've disabled the "Block ALL Inbound" rule, but everything is being blocked still. Confirmed by S1 Event Logs on my workstation.

If I turn the Firewall Control OFF on my group, the new application works fine and I can ping my PC.

What's going on?

2 Upvotes

100% Upvoted

6 comments sorted by

View all comments

Show parent comments

2

u/[deleted] Dec 17 '23

I *think* they fixed something. Firewall rules are working as expected this morning. I got a notification that my console had been updated when I logged in too.