Turn security alerts into network action.
See an existing endpoint-security alert trigger an EasyNAC access restriction, with a clear policy reason and event history.
What you’ll see
- Connect a configured third-party security alert to an access decision.
- See a high-risk rule take priority over normal device trust.
- Review the event and follow the demonstrated recovery process.
Video walkthrough
Review the orchestration event
The administrator reviews a configured Sophos email-alert rule that matches an event keyword and endpoint hostname.
Trigger the demonstration alert
A trusted Windows endpoint has normal connectivity before a test file triggers the endpoint-security alert.
Observe the restriction
Connectivity tests stop succeeding, and the browser shows the configured high-risk remediation message.
Review and clear the event
The administrator checks the infected flag and event details, then clears the demonstration event to restore policy-based access.
Chapter links open the selected moment on YouTube.
Read the condensed transcript
A configured orchestration event monitors Sophos email alerts for an infection keyword and a hostname. The Windows endpoint initially has full access because it meets the management trust conditions. Scanning a demonstration test file produces a security alert. EasyNAC matches the affected endpoint, applies an infected flag and assigns the higher-priority high-risk role. Connectivity tests show the restriction, and the browser displays a remediation message. The administrator reviews the event and its policy reason, then clears the test event to return the endpoint to normal policy evaluation. The demo also shows the alert email used by the rule.
Condensed from the original demonstration for readability. This video shows an earlier EasyNAC interface. Connector requirements and available checks depend on your current release and configuration.
Try it on your network.
Start with a practical agentless NAC pilot, or talk to us about your network and security tools.