Isolating a device from the incident card

To perform the actions selected in the incident card, the active Kaspersky Endpoint Agent policy must be applied to the device on which the incident occurred. If the device, on which the incident occurred, is not managed by the active policy, the rule to prevent the file execution or the device isolation will not be created.

To isolate a device from an incident card:

1. Open the incident card.
2. To isolate the device on which the incident occurred, in the Host section, click the Isolate host button.

Page top