Managing network isolation

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

To manage network isolation using the command line interface:

Network isolation cannot be enabled and network isolation setting cannot be configured using the command line interface.

1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
2. Using the cd command, navigate to the folder where the Agent.exe file is located.

   For example, you can type the following command cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Enter one of the following commands:
   • agent.exe --isolation=show

     Displays the current network isolation settings of the device in the console, including the list of the specified exclusion network profiles, as well as the list of rules defined in the network profiles.

   • agent.exe --isolation=disable

     Disables network isolation of the device.

4. Press ENTER.

Return codes of the --isolation command:

• -1 – command is not supported by Kaspersky Endpoint Agent version installed on the device.
• 0 – command successfully executed.
• 1 – required argument is not passed to the command.
• 2 – general error.
• 4 – syntax error.
• 9 – invalid operation (for example, an attempt to disable network isolation if network isolation is not enabled).