---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Operations Carbon Black Integration - Isolate Host Flow

# Security Operations Carbon Black Integration - Isolate Host Flow {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Security Operations Carbon Black Integration - Isolate Host is the implementation for the Carbon Black integration launched by the Security Operations Integration - Isolate Host flow.

## Before you begin

Role required: sn_si.analyst

## About this task

The flow process activities include:

* [Legacy: Execution Tracking - Begin (CIs) Flow Action](https://www.servicenow.com/docs/_7o31uAHwYdgp2ULKeg7Jw "The Execution Tracking - Begin (CIs) flow action starts the auditing process for a Security Operations Integration flow that operates on configuration items (CIs).")
* [Get IP from CI](https://www.servicenow.com/docs/E_cyn~hD1miK8Knk_epcRA "The Get IP from CI flow activity gathers the IP address from configuration items (CIs) to use in the flow.")
* [Collect Carbon Black configurations](https://www.servicenow.com/docs/nsCtHJK4lAxBn9mCicKmAQ "The Collect Carbon Black Configurations flow action gathers configuration information to use in the flow.")
* [Legacy: Capability Execution Tracking- Failure Flow Action](https://www.servicenow.com/docs/HSVug0UjENVHujWlW3oE1w "The Capability Execution Tracking - Failure flow action records a failure to the audit record.")
* [Get Sensor ID](https://www.servicenow.com/docs/sDwJ42D0fxtAptqREGVN7g "The Get Sensor ID flow action gathers sensor identifiers to use in the flow.")
* [Set Network Isolation Enabled activity](https://www.servicenow.com/docs/tyvoEQh4y0ICErOjpAI7bQ "The Set Network Isolation Enabled workflow activity enables network isolation.")
* [Update Sensor](https://www.servicenow.com/docs/xpfFqFAnIl7zMrml5CUFFg "The Update Sensor workflow activity updates the sensor to isolate hosts or endpoints.") - returns Isolate Host result.
* [Legacy: Capability Execution Tracking - Complete Flow Action](https://www.servicenow.com/docs/7qw3CssFWrN3CY1iP_dJTQ "The Capability Execution Tracking - Complete flow action updates the audit record when the flow is complete.")
{#secops-integration-cb-isolate-host-workflow__ul_csb_5zq_1z}

Activities specific to this flow are described here. For more information on other activities, see [Common Security Operations integration flows and orchestration activities](https://www.servicenow.com/docs/0QdgUFam~XYP1p38XC3fCg "Many of the flows associated with third-party integrations include the same activities. For example, activities for beginning and completing processing.").
* **[Get Sensor ID Flow Action](https://www.servicenow.com/docs/sDwJ42D0fxtAptqREGVN7g)**   
  The Get Sensor ID flow action gathers sensor identifiers to use in the flow.
* **[Set Network Isolation Enabled activity](https://www.servicenow.com/docs/tyvoEQh4y0ICErOjpAI7bQ)**   
  The Set Network Isolation Enabled workflow activity enables network isolation.
* **[Update Sensor activity](https://www.servicenow.com/docs/xpfFqFAnIl7zMrml5CUFFg)**   
  The Update Sensor workflow activity updates the sensor to isolate hosts or endpoints.