You can take remediation measures on user accounts that may pose a security risk to your network environment on the Trend Vision One console.
Zero Trust Secure Access: Go to the User Information screen by clicking on a user anywhere within the Zero Trust Secure Access app.
Operations Dashboard: Go to the User Profile screen.
The Isolate Endpoint Task screen appears.
Trend Vision One creates the task and displays the current action status on the Secure Access History screen.
Trend Vision One also creates the task and displays the current action status in the Response Management app.
The Remediation Logs tab on the Secure Access History screen appears.
You can also go directly to Secure Access History > Remediation Logs, and locate the task using the search field.
In progress... (): Trend Vision One sent the command to the
enforcement point and is waiting for a response
Successful (): The
enforcement point successfully received and executed the
command
Unsuccessful (): An
error or time-out occurred when attempting to send the
command to the enforcement point
Queued (): The
server queued the task due to a high volume of requests or
because the Security Agent was offline
The task status indicates whether the enforcement point was able to successfully receive and execute the command. It may take a few minutes for the process to complete.
After resolving the risk issues on the isolated endpoint, you can restore
network connectivity using the options icon () in the Zero Trust Secure Access or Operations Dashboard app.
For more information, see Restore Connection Task.