You can lock an infected or potentially infected device to stop command and control activity, the exfiltration of data, and the lateral movement of malware.
Full lockdown allows you to disable the device's LAN and Wi-Fi network capabilities and prevent all communication between the device and the CylanceOPTICS cloud services for up to 96 hours.
Partial lockdown disables the device's LAN and Wi-Fi network capabilities and retains communication with the CylanceOPTICS cloud services, allowing CylanceOPTICS to continue to receive detections and sensor data. Partial lockdown persists indefinitely and is available with the CylanceOPTICS agent version 3.1 or later for Windows.
Find the device that you want to lock.
If it’s a Windows device, in the drop-down list, click Full Lockdown.
Partial lockdown is available only for Windows devices with Optics agent 3.1 or later. A partial lockdown continues until you unlock the device.
For more information, see step 3.
To learn more about managing devices using CylanceOPTICS, see the Cylance Endpoint Security Administration Guide.