value:  Some actors and malware will disable cloud firewall settings for short periods of time to allow connections, and then restore restrictions to avoid detection. 
name: Impair Defenses: Disable Or Modify Cloud Firewall