To enable NSX-T to manage your workload VMs in the public cloud, you must onboard your workload VMs. Before that, you must understand the threat detection mechanism using the Quarantine Policy setting in CSM.