Dear community,
We are expanding device isolation capabilities in WithSecure Elements to now include Linux devices. Security administrators can remotely isolate a Linux device directly from the Elements Security Center when a security incident is detected, bringing Linux in line with the isolation functionality already available for Windows and macOS.
What is changing?
Device isolation has been available for Windows and macOS devices for some time, allowing administrators to contain active threats by restricting network communication while keeping the device visible and manageable in the Security Center. With this update, the same capability is now extended to Linux.
When a Linux device is isolated, its network communication is restricted to help contain active threats, prevent lateral movement, and limit potential impact during investigation and remediation. Isolation can be triggered as a response action from the Devices view and released once the incident has been resolved.
We believe this improvement will meaningfully strengthen your ability to respond to threats across mixed-OS environments, giving your security teams consistent containment capabilities whether the device in question is running Windows, macOS, or Linux.