Network Quarantine and Device Isolation

True Protection by Jag can isolate a compromised device from the network while maintaining its connection to the Management Console. Network quarantine prevents an infected device from spreading threats to other devices on the network while allowing administrators to investigate and remediate remotely.

Quarantine Capabilities

Full Network Isolation: Blocks all network traffic except communication with the True Protection Management Console. The device cannot access the internet, local network resources, or other devices.
Partial Isolation: Blocks access to local network resources while allowing internet access through a filtered connection. Useful when the device needs to download updates or tools for remediation.
Selective Isolation: Block communication with specific IP addresses, subnets, or network segments while allowing everything else.

Triggering Quarantine

Automatic: Configure True Protection to automatically quarantine a device when critical threats are detected. Navigate to Settings > Threat Response > Auto-Quarantine.
Manual (Local): Click Emergency Quarantine in the True Protection dashboard on the affected device.
Manual (Remote): In the Management Console, navigate to the device and select Actions > Network Quarantine.

Releasing from Quarantine

After the threat has been removed and the device is verified clean, release it from quarantine through the Management Console or by an administrator locally on the device. A post-quarantine scan is recommended before restoring full network access.