Cisco Secure Endpoint (AMP)-Endpoint Isolation Requirements
This document provides the requirement that needed to be met to use the endpoint isolation feature within Cisco Secure Endpoint.
Endpoint isolation is a feature that lets you block incoming and outgoing network activity on an endpoint to prevent threats such as data exfiltration and malware propagation. Endpoint isolation sessions do not affect communication between the connector and the Cisco cloud. There is the same level of protection and visibility on your endpoints as before the session.
Cisco Secure Endpoint Connector Version
In order to leverage the endpoint isolation feature the Cisco Secure Endpoint connector running must be:
- Secure Endpoint Windows connector 7.0.5 and later on x64.
- Secure Endpoint Windows connector 8.4.4 and later on ARM.
- Secure Endpoint Mac connector 1.21.0 and later.
- Secure Endpoint Linux connector 1.27.0 and later.
Enable Endpoint Isolation in Cisco Secure Endpoint Policy
Follow the following steps to enable endpoint isolation in your policy.
- Navigate to "Mangement->Policy"
- Find the policy and click on the "pencil" to edit the policy
- Check the "Enable Endpoint Isolation" checkbox (add in IP allow list if needed) and click "Save"
