NovaGuard

When NovaGuard detects a security event, it may classify the relevant endpoint as compromised or at high risk after identification. In this case, you can isolate the endpoint. An isolated endpoint can only communicate with the NovaGuard manager. All other inbound and outbound traffic for the endpoint is denied.

The following figures show an example of privilege escalation in advanced threats. To isolate the endpoint, click Isolate .

To cancel the isolation, click Restore .

Administrators can also isolate an endpoint with NovaGuard agent installed as an administrator by clicking New and entering the IP address.