Isolation Log

The Isolation Log holds the information of all IP Addresses that have been blocked by the Isolation Process.

The information presented in the Isolation Log is as follows:

• BLOCK

Indicates the blocking action.

• ip.SrcAddr

Indicates the IP address that generates the traffic. This IP corresponds to the Private IP of the Endpoint.

• ip.DstAddr

Indicates the destination IP address of the traffic.

• tcp/udp.SrcPort

Source port used in the communication according to the protocol.

• tcp/udp.DstPort

Destination port used in the communication according to the protocol.

• tcp.Flags

Information on TCP protocol flags.