Manually isolating devices with Microsoft Defender XDR

If you have set up ATR for Microsoft Defender XDR, you can manually isolate devices from the network, and undo the isolation at any time.

To manually isolate a device

1. In Barracuda XDR Dashboard, click ATR Settings > Firewalls.

2. Click the Microsoft 365 Defender row.

3. Click Isolate/Unisolate Device.

4. Select one of the following:

   • Isolate

   • Unisolate

5. Type the machine’s hostname.

6. Click Submit.

To undo a device isolation

1. In Barracuda XDR Dashboard, click ATR Settings > Firewalls.

2. Click the Microsoft Defender for Endpoint row.

3. Click Isolate/Unisolate Device.

4. Select Unisolate

5. Select the machine’s hostname.

6. Click Submit.