Hello, was wondering if it was possible to isolate individual devices via RESTful API calls and/or if there is already documentation around this.
Thank you,
Hello, was wondering if it was possible to isolate individual devices via RESTful API calls and/or if there is already documentation around this.
Thank you,
Hi Connor,
yes you can do so using the endpoint API, see: https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/isolation/post.
Just keep in mind that this functionality is only available for accounts in which Intercept X Advanced (for Server) with XDR/MTR is licensed. Accounts without XDR/MTR cannot use the On-demand Endpoint Isolation (be it via the UI or API), see: https://www.sophos.com/en-us/products/endpoint-antivirus/tech-specs.
Regards,
Marcel
Hi Connor,
yes you can do so using the endpoint API, see: https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/isolation/post.
Just keep in mind that this functionality is only available for accounts in which Intercept X Advanced (for Server) with XDR/MTR is licensed. Accounts without XDR/MTR cannot use the On-demand Endpoint Isolation (be it via the UI or API), see: https://www.sophos.com/en-us/products/endpoint-antivirus/tech-specs.
Regards,
Marcel