: Locate Isolation Exclusions and add a new rule.
This feature ensures that critical business processes or administrative tools remain functional while the rest of the machine's network traffic is blocked to prevent the spread of a threat.
: Go to the Endpoint Agent configuration section. RedCloak-1.0-pc.zip
: Keeping a specific remote management tool (like RDP or a custom internal admin service) active so IT teams can still access the machine to perform forensic analysis or remediation.
One primary feature you can create or configure within this environment is a . This allows the agent to maintain network connectivity for specific trusted applications or services even when a host is "isolated" during a security incident. Feature: Custom Isolation Exclusion : Locate Isolation Exclusions and add a new rule
: Enter the necessary network details (e.g., Destination IP: 192.168.1.10 , Port: 443 ).
: Typically handled through the Taegis XDR management console, where you define the specific IP addresses, ports, or protocols that should remain open. How to Implement : Keeping a specific remote management tool (like
: Save the policy to apply the new feature to your Red Cloak agents. Taegis Endpoint Agent Known Issues