ction Inbound VMName "Tenant A - VM 10" -Weight 10 IsolationID 4490741 -LocalPort 80 Here, HYPVCH1 ad. demo. com is the name of the host where Tenant A - VM 10 is running, as obtained in step 4, and the Isolation ID needs to be set to VMSubnetID as obtained in step 2. Please leave this PowerShell console open. When adding rules it is suggested to use weight increments of 10 to allow other rules to be inserted between rules if necessary. 17. On Tenant A - - VM 11, repeat step 13. You will see that TCPTestSucceeded has changed to True. Network Access Control Lists 18. Return to the PowerShell console left open on the VMM console in step 14, and enter the following PowerShell cmdlets: Invoke-Command -ComputerName hypvCH1.ad.demo.com - ScriptBlock dd-VMNetworkAdapterExtendedAcl -Action Deny -Direction Outbound -VMName "Tenant A - VM 10" Weight 1 - IsolationID 4490741 Here, HYPVCH1 ad. demo. com is the name of the host where Tenant A - VM 10 is running, as obtained in step 4, and the Isolation ID needs to be set to VMSubnetID as obtained in step 2. Please leave this PowerShell console open. When adding base rules such as a Deny All, it is suggested to apply a weight of 1 to allow other rules to override it if appropriate. 19. On Tenant A - VM 11 repeat step 14. You will see that TCPTestSucceeded has changed to False. This is because all outbound connections have been denied. 20. Return to the PowerShell console left open on the VMM console in step 17, and enter the following PowerShell cmdlets: Invoke-Command -ComputerName hYpVCH1.ad.demo.com - ScriptBlock Remove-VMNetworkAdapterExtendedAcl -Direction Inbound - VMName "Tenant A - VM 10" Weight 10 This removes the inbound rule for port 80. In the same PowerShell console enter the following cmdlets: Invoke-Command ComputerName hYpVCH1.ad.demo.com - ScriptBlock Add-VMNetworkAdapterExtendedAcl -Action Allow - Direction Inbound VMName "Tenant A - VM 10" Weight 10 IsolationID 4490741 -LocalPort 80 -Stateful $True Protocol TCP This adds a stateful ACL rule; this ensures that