Internet Traffic blocked in Edge Sandbox Mode (Windows Defender Application Guard)
I have successfully activated Windows Defender Application Guard but it seems surfing in Edge Sandbox Mode has been impossible. All required gpos and addition requirements as described on here: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard have been configured accordingly. I had a tip from microsoft support that my firewall could be blocking traffic (NAT)coming from the Host Computer so should allow all IP subnets in the range of 172.x.x.x or 192.x.x.x. I have tested that by allowing this traffic in the Trellix including Remote Ports 49700–65535, as described in Trellix documentation here https://kcm.trellix.com/corporate/index?page=content&id=KB88788 but to no avail. Could there be any other underlying root causes in a typical Enterprise environment where systems have been hardened using Security policies defined by CIS. What rules can be exempted here in order to allow this kind of traffic. Anybody has experience with this kind of environment or issue. Some tips will be welcomed.[Request] be able to restart Windows Sandbox | Persistent vs Temporary Sandbox
Windows Sandbox cannot be used for testing any software installation which requires a restart. This is one of its shortcomings, I think Microsoft should implement some kind of setting in future to allow a 'persistent' Sandbox besides the current temporary Sandbox. so like user will be asked before launching it that whether they want a Temporary or Persistent sandbox. Temporary = everything is wiped clean after closing. Persistent = everything will be there even after host device restart/shutdown or Windows sandbox (guest OS) restart.
