topic Re: Secure Endpoint, allow internet access while computer is isolated? in Endpoint Security

Secure Endpoint, allow internet access while computer is isolated?

hank hale — Wed, 25 Sep 2024 23:58:50 GMT

Is it possible to put a machine in isolation, to keep it off our internal network, but still allow the machine to access the internet? I have built an IP Block List with our internal IPs, but we would want our end users to be able to access the internet if moved to this policy. Long story short, it is a policy to put traveling staff into, should their machine become compromised, as a temp fix until we are able to address the issue.

Thanks

Re: Secure Endpoint, allow internet access while computer is isolated?

Matthew Franks — Thu, 26 Sep 2024 11:18:17 GMT

You couldn't achieve this with endpoint isolation since it is meant to stop the endpoint from communicating with anything other than the Secure Endpoint servers. What you can do is move them to a policy with the IP Blacklist in place rather than isolating them if you see an issue where they would normally be isolated. I would caution against this approach since it would allow any malicious code to reach out to additional resources.

Thanks,

Matt

Re: Secure Endpoint, allow internet access while computer is isolated?

hank hale — Thu, 26 Sep 2024 12:08:33 GMT

Thanks Matt!