Body
This article applies to the following operating system(s):
Windows
Apple macOS
Overview
This article outlines:
NOTE: Due to the nature of device Isolation, this article is mainly presented as a resource for Local Support/TSPs to identify an isolated macine.
Isolation Notice
A pop-up in the taskbar will appear which indicates the device has been isolated from all network capabilities:
![This image is of a pop-up that indicates your computer is isolated because of your administrator.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=27d42dd2-7612-4a8c-ae24-53a0bf6132d7.png)
![This image is of a pop-up that indicates your computer is isolated.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=cbab46f7-9e17-4908-a5f2-0170cd81e85b.png)
Restrictions
Devices that have been isolated will be unable to access network resources of any kind, including:
- Internet
- Networked drives
- New email (sending and receiving)
![Image of an isolation pop-up.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=ba321194-11c7-4663-83b0-c10e556007bc.png)
Open "Sophos Endpoint" Menu to check the status:
![This is an image of a pop-up indicating isolation.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=d86b66c3-2e6b-4a9e-823b-d57eb12d67d6.png)
Reasons for Isolation
Some explanations can, but not always, be attributed to the following unless an exception has been made:
- Devices that exhibit behavior consistent with an active infection
- Regular and reoccuring notices implying an underlying infection that hasn't been mitigated
- 2+ types of malware notices present simultaneously which might indicate an active and spreading infection
- Critical notices having a severity, determined by the analyst, to warrant isolation
- Unresponsive device owners concerning prolonged notices over 3 days from unmitigated infections
- See also APM 30.14 Proactive UI Network Security Measures
- Devices that have software or Operating Systems past End-of-Life (EOL) and highly susceptible to attack
What Next?
Removed from Isolation Notice
Similar to an Isolation Notice, a Removed from Isolation notice will appear in the taskbar:
![This is an image of a removed from isolation notice.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=f4acde31-c169-46ec-9daf-33ebee3b8840.png)
![This is an image of a removed from isolation due to administrator notice.](https://support.uidaho.edu/TDPortal/Images/Viewer?fileName=a57fa528-ff0d-4a4d-8fd0-a916d0bb8a1c.png)
Resources