Hospital customers may face the risk of medical data leakage, such as patients' physical examination records, during remote equipment maintenance or internal networking among medical staff. Therefore, it is necessary to detect behaviors that pose external connectivity risks.

Step 1.Add a new NIC detection policy, select the Multiple NICs option, submit, and wait for the policy to be applied.

Step 2.Go to Monitor > Logs > Security Logs > Unauthorized Outbound Access Logs, and check the unauthorized access logs.

Step 3.To block the device, click More and select the Block option.

Step 4.Click OK. Then, the IP address will be added to the Temporary Blacklist (SOC > Blacklist/Whitelist > Blacklist > Temporary Blacklist).