topic Re: I want to create a pop-up notification if computer gets isolated in Endpoint Security

I want to create a pop-up notification if computer gets isolated

jakacm — Tue, 14 May 2024 14:34:43 GMT

Our organization would like to create a pop-up notification on an end user's device that informs them that their computer has been isolated and they need to contact IT services.

My question, is there a specific registry key or a file that gets created by AMP/Secure Client that will allow us to create a script that will run if this key is turned "on" or if a specific file is created?

Thank-you for any assistance!

Re: I want to create a pop-up notification if computer gets isolated

Matthew Franks — Tue, 14 May 2024 14:49:50 GMT

When you isolate an endpoint a file is created for the isolation allow list.
"C:/Program Files/Cisco/AMP/endpointisolation/endpointisolationallowlist.xml"

When you stop the isolation, that file is removed. So, you can check to see if the file exists with your script and then create your pop up if it does. Hope that helps!

Thanks,

Matt

Re: I want to create a pop-up notification if computer gets isolated

jakacm — Tue, 14 May 2024 14:59:00 GMT

Thankyou so much! I will give this a try!