Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

Can a device be released locally from network isolation if automated action has isolated it?

Issue:

If a device has been isolated from the network due to a high or severe risk level EDR Broad Context Detection, can a device be released locally from network isolation if the automated actions feature has isolated it? 

Resolution:

If a device has been isolated from the network by the Automated actions rule, the device cannot be released from isolation locally. You need to release it from the Elements Security Center:

  1. Log in to the Elements Security Center portal 
  2. Navigate to the Environment > Devices page
  3. Select the device which has been isolated from the network (a menu will appear) 
  4. Click Network isolation > Release from network isolation