Computer groups: deny internet access / "isolate"

Question

Hi all,

I've been scratching my head for quite some time now looking for a way to bulk isolate machines in the endpoint protection module of Sophos Central.
Our company policy is to isolate machines not seen on the system for 30+ days, which can be 250+ computers a time to isolate one by one!

I've recently discovered the computer groups feature and noticed you can have set policies per group;
Is there a particular way to set up so that a certain computer group cannot access the internet, so isolating by proxy?

Any other workarounds welcome - thanks in advance

This thread was automatically locked due to age.

RichardP · Accepted Answer

ok, you don't need to use Isolate for this. Edit the base web control policy that does the restrictions you want. This applies to all users who don't have another policy assigned - so would apply to the local user. Then you could have a less restrictive policy for normal users and assign that in bulk in Central. 
 I hope this helps.

Computer groups: deny internet access / "isolate"

Top Replies