• Capture Client
• Overview
• Deep Visibility
  • Getting Started
  • Accessing SentinelOne Help
  • Finding Threat Hunt Queries in SentinelOne
• Hunter Chrome Extension
  • Installing SentinelOne Hunter Chrome Extension
  • SentinelOne Hunter Modes
  • Licensing SentinelOne Hunter Chrome Extension
• Network Control
  • Getting Started with Network Control
  • Configurable Network Quarantine
  • Network Status
  • Network Quarantine Operations
• Remote Shell
  • SentinelOne Remote Shell Use Case 1
  • SentinelOne Remote Shell Use Case 2
• Rogues Detection
• Useful References
• SonicWall Support
  • About This Document

Getting Started with Network Control

To get started with the configuration of Network Control

1. Navigate to SentinelOne Management console.

2. In the SENTINELS toolbar, click on Network Control.

   

   The Firewall opens.

   

   You can use a single unified rule base for all Operating Systems. Each rule in the rule base can be applied to one or more operating systems.

3. Click on New Rule. The Create New Rule window opens.

   

4. Specify the Rule Name and OS Type.

5. Create Tags that represent the Firewall policies.

6. Add Rules to the Tag (Rules function as a policy - a set of rules in a specific order).

   

7. Manage inheritance with granular inheritance modes.

   Rules can be fully inherited, not inherited, or inherited based on tags. Firewall On or Off status is separated from rule inheritance.

   

8. Apply rules based on an endpoint's location. Use the new Description field in rules to add details. If a rule had a "tag" from a version before Liberty, that string is moved to the Description field when upgraded to Liberty.

There are no default rules. All traffic is allowed if you do not block it explicitly.

When SentinelOne Firewall is enabled on Windows endpoints, it becomes the active firewall. SentinelOne Firewall takes the control but it does not change rules from other firewall solutions on the endpoint.