@adiz You can also block instances with mitractl add-filter-rule command. This method is supposed to be better than editing yaml array by hand.