Windows 10: Isolating a infected endpoint device from all network connectivity

Once an endpoint, like laptop, desktop, is infected, quick detection and the ability to respond fast is needed to minimize impact. Quick isolation is needed for reducing the spread of malware.

Our Windows machines are Intel devices which have Intel Active Management Technology AMT which can filter all network communications on the wired and 802.11 wireless networks of a platform using a feature called System Defense.

We are using McAfee anti-virus right now so using McAfee Threat Event Log, we identify the Event ID for situations where isolation of the endpoint is needed. This can separate the infected device from our network and alert us via email. This allows us to quickly isolate a device when it is infected instead of waiting for a call/ticket from user.

https://community.mcafee.com/t5/Documents/Isolating-a-Client-from-All-Network-Connectivity/ta-p/548316 explains how it is done.


We are moving to Microsoft Defender and considering going to Microsoft Defender Advanced Threat Protection if our budget allows it.


1. Can we do this if we have Microsoft Defender which comes with Windows 10? If so, how?


2. Can we do this if we have Microsoft Defender Advanced Threat Protection Microsoft Defender ATP? If yes, how?

:)

 

Master List of Windows 10 version 1803 connection endpoints

Read more: Windows 10, version 1803, connection endpoints for non-Enterprise editions | Microsoft Docs

 

Master List of Windows 10 version 1803 connection endpoints

Read more: Windows 10, version 1803, connection endpoints for non-Enterprise editions | Microsoft Docs

 

Network Connectivity

Thanks for the quick response. Have you tried to follow and run all the steps provided on the link above?



How are you trying to connect to the network? Wi-Fi / Lan?

• If you’re trying to connect via Wi-Fi, kindly check if the Wi-Fi service is enabled on your computer.

• If you’re connected via LAN, kindly unplug and re-plug the Ethernet cable connect from your computer to the router.

To further isolate this issue, kindly try connecting another device on the Internet and check if the same issue occurs.



Follow all the steps provided on the link below on how to fix network connection issues:

• Fix network connection issues in Windows 10

If the issue still persists, contact your Internet service provider and have them check your network.



Keep us posted.