05-14-2024 07:34 AM
Our organization would like to create a pop-up notification on an end user's device that informs them that their computer has been isolated and they need to contact IT services.
My question, is there a specific registry key or a file that gets created by AMP/Secure Client that will allow us to create a script that will run if this key is turned "on" or if a specific file is created?
Thank-you for any assistance!
05-14-2024 07:49 AM
When you isolate an endpoint a file is created for the isolation allow list.
"C:/Program Files/Cisco/AMP/endpointisolation/endpointisolationallowlist.xml"
When you stop the isolation, that file is removed. So, you can check to see if the file exists with your script and then create your pop up if it does. Hope that helps!
Thanks,
Matt
05-14-2024 07:59 AM
Thankyou so much! I will give this a try!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide