CrowdStrike Falcon - Isolate and Unisolate
  • 07 Nov 2022
  • 1 Minute to read
  • Dark
    Light
  • PDF

CrowdStrike Falcon - Isolate and Unisolate

  • Dark
    Light
  • PDF

CrowdStrike Falcon - Isolate quarantines each of the assets (endpoints) retreived from the saved query supplied as a trigger (or devices that have been selected in the asset table), from the network.

CrowdStrike Falcon -Unisolate restores full network connectivity to each of the assets (endpoints) retreived from the saved query supplied as a trigger.

NOTE
To use the actions below, you must successfully configure a CrowdStrike Falcon adapter connection.

Isolate in CrowdStrike Falcon

To configure CrowdStrike Falcon - Isolate, from the Action Library, click Execute Endpoint Security Agent Action, and then click CrowdStrike Falcon - Isolate.

Connection Settings

  1. Instance name (required) - The Axonius node to utilize when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Required Permissions

See CrowdStrike Falcon adapter - Required Permissions.

Unisolate in CrowdStrike Falcon

To configure the CrowdStrike Falcon -Unisolate action, from the Action Library, click Execute Endpoint Security Agent Action, and then click CrowdStrike Falcon -Unisolate.

Connection Settings

  1. Instance name (required) - The Axonius node to utilize when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Required Permissions

See CrowdStrike Falcon adapter - Required Permissions.


To learn more about configuring Enforcement Sets, see Configuring Enforcement Sets.


Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.