You can trigger the Isolate device from the network response action and its corresponding reverse action Disable network isolation on a device. To manage network isolation, the device must run the Endpoint Agent software component and must be prepared to receive data from EPP applications.
To trigger a response action for a device:
In the Network map section, you can select the device on both the network interactions map and the topology map.
The details area appears in the right part of the web interface window.
Items in the Threat response drop-down list are available if the Endpoint Agent software component is installed on the device.
A window with a confirmation prompt opens.
The application will register a new response action. You can view information about this action in the Events section on the Response actions tab.
Page top