As I see CIM All_Traffic data model may have one of 3 possible values:
Blocked is easy one.
But what exactly teardown means? Does it mean that connection was been closed after being allowed? And in this case Allowed means that connection is still alive?
... View more