deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-19 00:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update quarantine.md

Browse Source
This commit is contained in:
Benny Shilpa 2020-11-17 15:29:38 +05:30 committed by GitHub
parent 47390e8714
commit 2a212f8430
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
windows/security/threat-protection/windows-firewall/quarantine.md
View File

@ -1,5 +1,5 @@
--- ---
title: "Quarantine" title: Quarantine Behavior
description: Quarantine behavior is explained in detail. description: Quarantine behavior is explained in detail.
ms.author: v-bshilpa ms.author: v-bshilpa
author: Benny-54 author: Benny-54
@ -17,7 +17,7 @@ ms.topic: conceptual
ms.date: 11/17/2020 ms.date: 11/17/2020
--- ---
# Quarantine # Quarantine Behavior
One of the security challenges that network admins face is configuring a machine properly after a network change. One of the security challenges that network admins face is configuring a machine properly after a network change.
@ -197,7 +197,7 @@ Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /s
Sample Drop Audit with `filterOrigin` as `Quarantine Default`. Sample Drop Audit with `filterOrigin` as `Quarantine Default`.
![Quarantine Default](images/quarantine-default-audit.png) ![Quarantine Default](images/quarantine-default1.png)
Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: