Occasional Contributor


We have installed ATP sensor on, on-premises DC's .
However, after installation we have traffic to external IP’s over port 3389 (RDP) which is being blocked at Zscaler level. Just wanted to know if there is specific application or task making the connection to external IP’s . And is this expected behavior .... If yes, can you please explain a bit on this process.