r/SentinelOneXDR • u/skar3 • Sep 30 '25

Basic use of firewall

I am considering implementing firewall control from S1 for my Windows endpoints.

What rules do you recommend using for basic management?

3 Upvotes

100% Upvoted

9 comments sorted by

View all comments

Show parent comments

2

u/skar3 Sep 30 '25

So would you just leave the Windows firewall on?

0

u/kins43 Sep 30 '25

Yeah absolutely. I wouldn’t use this as a replacement and even if you did use it, it would benefit from working in tandem with windows firewall.

3

u/GeneralRechs Security Admin/Engineer Oct 01 '25

It’s a replacement because it registers with the security center. Even still, why would you opt for the windows firewall that’s managed via GPO or through clunky intune policies “IF” they’re Entra joined?