.png?sv=2019-07-07&sig=LZ%2FqykJSEws2jyIxt9r96rdGFLxGL4iYMMch20vLGNs%3D&spr=https%2Chttp&st=2022-05-28T09%3A57%3A14Z&se=2022-05-28T10%3A07%3A14Z&srt=o&ss=b&sp=r){kind=logo}
Isolate/Unisolate in Palo Alto Networks Cortex XDR
- 07 Feb 2022
- 1 Minute to read
-
Print
-
DarkLight
-
PDF
Isolate/Unisolate in Palo Alto Networks Cortex XDR
- Updated on 07 Feb 2022
- 1 Minute to read
-
Print
-
DarkLight
-
PDF
Isolate in Palo Alto Networks Cortex XDR quarantines each of the query results entities (endpoints) from the network that are the result of the saved query supplied as a trigger (or devices selected in the asset table).
Unisolate in Palo Alto Networks Cortex XDR restores full network connectivity to each of the query results entities (endpoints).
NOTE
To use the actions below, you must successfully configure a Palo Alto Networks Cortex XDR adapter connection.
Isolate in Palo Alto Networks Cortex XDR
To configure Isolate in Palo Alto Networks Cortex XDR, from the Action Library, click Execute Endpoint Security Agent Action, and then click Isolate in Palo Alto Networks Cortex XDR.
Connection Settings
Instance name (required) - The Axonius node to utilize when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
Unisolate in Palo Alto Networks Cortex XDR
To configure Unisolate in Palo Alto Networks Cortex XDR, from the Action Library, click Execute Endpoint Security Agent Action, and then click Unisolate in Palo Alto Networks Cortex XDR.
Connection Settings
Instance name (required) - The Axonius node to utilize when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
To learn more about configuring Enforcement Sets, see Configuring Enforcement Sets.