Managing network isolation

To manage network isolation using the command line interface:

Network isolation cannot be enabled and network isolation setting cannot be configured using the command line interface.

1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
2. Using the cd command, navigate to the folder where the Agent.exe file is located.

   For example, enter the command cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Enter one of the following commands:
   • agent.exe --isolation=show

     Displays the current network isolation settings of the device in the console, including the list of the specified exclusion network profiles, as well as the list of rules defined in the network profiles.

   • agent.exe --isolation=disable

     Disables network isolation of the device.

4. Press ENTER.

Return codes of the --isolation command:

• -1 – command is not supported by Kaspersky Endpoint Agent version installed on the device.
• 0 – command successfully executed.
• 1 – required argument is not passed to the command.
• 2 – general error.
• 4 – syntax error.
• 9 – invalid operation (for example, an attempt to disable network isolation if network isolation is not enabled).