Forum Discussion
StephanGee
Apr 26, 2023Iron Contributor
LpacSenseNdr Rule is added to Firewall - what is it
Hi everyone, we changed on our Fortigate Firewall the interface to "LAN" allowing device discovery. Soon after that ppl got disconnects (20s) during Teams call. As i could not find it in the...
jbmartin6
Jun 06, 2023Iron Contributor
FWIW, I haven't found this on any of my or my employer's machines.
A bit of speculation, 'LPAC' in some quarters means low privilege app container, and SenseNDR is the main network inspection process for MDE. It would make sense to want to prevent network connections to a container for SenseNDR. Maybe you have some setting that compels some extra security on SenseNDR? I can't imagine what that might be. Nor does that really explain what the link is with teams and the other issues described.