IP blocker

You can block all network connections of the host with a specified IP address where the agent is installed. This can be useful if you see a suspicious connection and need to terminate it. If this IP address is already blocked at the policy level, you can additionally block it on the agent. In this case, connections to the host with this address will not be restored even after the module configuration is changed in the policy. You cannot block the PT XDR server IP address.

To block an IP address on an agent:On the main menu, go to the Agents section.The Agents page will open.Click the name of the agent on which you want to block the IP address.The agent card will open.Select the "IP blocker" module.Click .The module card will open.Enter an IP address in IPv4 or IPv6 format or a subnet in CIDR notation.Click Block.The IP address is blocked on the agent.To restore the connection to an IP address on an agent,Click Unblock next to the IP address in the list.
Connections to this IP address will not be restored if it is blocked at the policy level.

The website uses cookies according to the cookie policy.