Event banner
Event details
NickWelton
Microsoft
MicrosoftHi Nathan, check out this guide on using the Filter Origin ID to determine the source of unexpected dropped or blocked packet/connections. https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/filter-origin-documentation
I was looking for the rules themselves, across our fleet. As we have blocked all inbound traffic for all profiles, the rules we are concerned with will be "Allow" rules.