Isolate Endpoint Device

Configure and create an isolation action for an endpoint device. Specify the endpoint product, device details, isolation duration, and reason for isolation.

Isolate Endpoint Device

  1. Select Isolate Endpoint Device and then click Add.

    The Isolate Endpoint Device window appears.

  2. Specify these:

    • Type - Select the endpoint product:

      • Endpoint Security

      • CrowdStrike

      • Microsoft Defender

      • SentinelOne

    • Device Name - Enter the device name, or select a value from previous step outputs or automation parameters.

    • Duration - Select how long the device remains isolated.

    • Reason - Enter the reason for isolating the device.

  3. Click Create.
Note:

The selected endpoint product must be configured before the isolation action can run.