A quarantine policy isolates VPC traffic for a virtual machine by quarantining it. When a virtual machine is under attack or you want to perform isolated debugging on a virtual machine, you can apply a quarantine policy to it. You can apply strict quarantine to fully isolate the virtual machine, or forensic quarantine with specific allowlist policies.
Strict quarantine: After this policy is applied, all traffic entering and leaving the virtual machine is blocked. The virtual machine is completely isolated from the outside and cannot connect to the network. You can only access the virtual machine through the management controller.
Forensic quarantine: If you need to allow specific traffic to a quarantined virtual machine, you can apply a forensic quarantine policy. You specify an allowlist for traffic accessing the virtual machine (ingress traffic) and an allowlist for the virtual machine's outbound targets (egress traffic), to help troubleshoot the virtual machine.
Information:
Quarantine policies have higher priority than security policies. That is, when a virtual machine is under strict quarantine, all traffic through the vNICs in the VPC is denied, even traffic permitted by security policies.
