Isolate and De-isolate Endpoints Using Jamf

You can configure Red Canary to add and remove endpoints from a Jamf Pro static group. Any endpoints in this group will be isolated from your network until you remove them.

1. Set up your static group in Jamf Pro.

2. Configure your Jamf network isolation group in Red Canary.

3. Isolate and deisolate endpoints as needed.

Set up your static group in Jamf Pro

You’ll need to configure a static group before you complete these steps. To learn more about creating static groups, check out Static Groups in the Jamf Pro documentation.

1. Log in to Jamf Pro, and find your network configuration profile.

2. Select the Scope tab, then click Exclusions.

3. Click Computer Group, then click Add.

4. Select your static group.

5. Configure your static group with the required Jamf Pro network restrictions.

6. Click Save.

Configure your Jamf network isolation group in Red Canary

Please contact support with the name of your static group to be set.

Isolate and deisolate endpoints

1. Go to your Endpoints page.

2. Select the endpoint you want to isolate or de-isolate from the network.

3. To add the endpoint to the static group, click Isolate Endpoint. To remove the endpoint from the group, click Disable Isolation.

4. Review the confirmation message, then click Ok.