Sophos Rest API Call to Isolate Device

Question

Hello, was wondering if it was possible to isolate individual devices via RESTful API calls and/or if there is already documentation around this. 
 
 Thank you,

Marcel · Answer

Hi Connor, 
 yes you can do so using the endpoint API, see: https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/isolation/post . 
 Just keep in mind that this functionality is only available for accounts in which Intercept X Advanced (for Server) with XDR/MTR is licensed. Accounts without XDR/MTR cannot use the On-demand Endpoint Isolation (be it via the UI or API), see: https://www.sophos.com/en-us/products/endpoint-antivirus/tech-specs . 
 Regards, Marcel

Sophos Rest API Call to Isolate Device

Top Replies