A public-health lab VM was placed on the Distributed Firewall exclusion list during troubleshooting and never returned. New DFW rules do nothing on that VM. What should the administrator do?
Select an answer to reveal the explanation.
Short Explanation
Exclusion is a do-not-inspect sticky note that people forget to peel off. While it is there, every new DFW rule is theater. Take the VM off the list.
Full Explanation
The Distributed Firewall exclusion list is a common cause of policy that does nothing, because excluded VMs skip DFW entirely. Removing the leftover exclusion restores enforcement. Duplicating allows, disabling DFW cluster-wide, or substituting Workspace ONE Access does not re-enable inspection on that VM.