Isolated Host Exclusion
Patrick Sofo [Security Product Manager]
Hi Adam, can you clarify what you mean by auto-decommission? If you are looking for Host Isolation exclusions...this allows partners to exclude specific hosts or entire organizations from being isolated by Huntress. The setting to control this can be found on the Account Settings page within the Portal.
A
Adam Upton
Patrick Sofo [Security Product Manager]: When a machine is removed from the portal due to inactivity.
Patrick Sofo [Security Product Manager]
Adam Upton: While isolated the machine still communicates with the Huntress Portal to send back additional data for our ThreatOps team to analyze during the course of an incident. That said, the agent shouldn't become unresponsive. Have you noticed this happening in your account? If so, I would encourage a question into Support so we can get an engineer to take a closer look into what might be going on.
A
Adam Upton
Patrick Sofo [Security Product Manager]: So the goal is to use Huntress as part of our process when a machine gets lost or stolen. In this type of situation, a machine may not be on for an unknown period of time. I do not have any issues such as you've suggested.