Inound connection identified as Outbound by Microsoft Sentinel

Nimantha Deshappriya 21 Reputation points

I have noticed that there are several outbound connections in the overview page.


However, having analyzed the traffic, I realized that inbound traffic labeled as outbound traffic.
Note: I have removed the destination IPs as they are internal public IPs.

Can you please advise me?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,025 questions
0 comments No comments
{count} votes