Event banner
Event details
Knowing many applications, not sandboxed by the MSIX installer, add their own firewall rules. Is there a way to report on, or even clean up, rogue firewall rules?
NickWelton
Microsoft
MicrosoftHi Nathan, check out this guide on using the Filter Origin ID to determine the source of unexpected dropped or blocked packet/connections. https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/filter-origin-documentation
- I was looking for the rules themselves, across our fleet. As we have blocked all inbound traffic for all profiles, the rules we are concerned with will be "Allow" rules.