Symantec ATP / EDR use Host integrity policy of SEP to quanrantine machines if an administrator click on Isolate button in Symantec ATP Console.
With Host integrity it is possible to notifiy user if the machine is not compliant. The HI policy failed, the machine is quarantine and the user is notified.
With ATP Isolation, the HI policy put the machine in quarantie. But the notification is not displayed.
Symantec Support says it is not a bug, it was not intended for...
So, could you add this basic feature: possibility to notify users in case of isolation?
Thanks and Regards, Sebastien