Run Isolate Host

Isolate Host restricts system connections to other devices.

Avant de commencer

Role required: sn_si.analyst

Pourquoi et quand exécuter cette tâche

Remarque :

If no implementations are available, capability actions are not displayed in product menus.

The Security Operations Integration - Isolate Host or Endpoint flow can be triggered from the related list on a security incident.

Procédure

1. Navigate to a security incident.
2. Select Configuration Items from the Related List tab.
3. Click Isolate Host in the Actions on selected rows... drop-down menu.

   

   The dialog box appears.

   

4. Choose the implementation.
5. Click Isolate Host.
   The flow execution audit is displayed in the work notes section.