Windows System NIC Displays Alarm Information Public Knowledge

|
  • 129
  • 7

Issue Description

After the Access Control Policy is configured, Windows operating system NIC prompts for alarm information, but the PC still can access internet.

Handling Process

1. By capturing the packet on the console interface, it is found that the PC will visit www.msftncsi.com, and the domain name is rejected by the IAM.

2.Check Access Control Policy and find that the policy only allows access to a few websites.

3.After adding the www.msftncsi.com domain name to Global Exclusion, the NIC of Windows operation will not prompt a warning message.


Root Cause

The Windows operating system will judge the network connectivity by accessing some domain names. When the domain name used to test connectivity is not accessible, the network will be considered to be faulty. When the Access Control Policy is configured to allow only PCs to access a few websites, Windows may Unable to pass the connectivity test.

Solution

1.Add www.msftncsi.com to Global Exclusion.
2.The URLs used by different versions of the operating system to test connectivity will be different. Please check the Report Center for specific URLs that have been rejected.
Faisal Posted 16 Aug 2020 10:38
  
Thank you very much for the information ...
Muhammad Bilal Lv4Posted 15 Sep 2020 00:51
  
Thanks for sharing the information
Faisal Posted 27 Oct 2020 10:56
  
Nice article ...
Faisal Posted 12 Dec 2020 08:56
  
Great info ...
Ellechar Lv4Posted 02 Feb 2021 10:28
  
Very nice infooooooooooooooooooooooooooooo
Faisal Posted 15 Mar 2021 07:55
  
Very informative …
Faisal Posted 31 May 2021 12:45
  
Nice guidance ...

I want to write a case
Doc ID: 2428
Author: Newbie280530
Updated: 2019-12-23 15:36
Version: