Press CTRL+K to open search

QuarantineDevice / EndquarantineDevice reaction

  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

Starts and ends the quarantine of the host from the network while retaining connectivity to Trellix products.

Important

The Network Flow plug-in must be enabled for quarantine to work.

Related articles
  • Quarantine devices
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Respond to threats > Contain threats > Quarantine devices
  • Quarantine devices
    Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Contain threats > Quarantine devices
  • QuarantineDevice / EndquarantineDevice reaction
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Reacting to incidents > Built-in reactions