I need a solution
Hi,
I have a specific requirement of isolating zero day attack machines from production network with-in few munites automaticaly.
I am trying to configure the Host integrity policy to fail so that the machine can be moved to quarantine VLAN by SEPM policy.
Is anybody have a custom template to define a requirement in HI to fail is any machine detect a virus attack.
( the machine woud be installed with symantec AV updated with basic required definition etc..)
It is a business requirement to quarantine those machines. Can anyone help..
thanks