Configure Live Response for computers

Live Response lets you connect to computers to investigate and remediate possible security issues.

Restriction To change Live Response settings, you must be a Super Admin or have a custom role that includes Manage Live Response settings for computers. See Give admins access to Live Response.

Turn on Live Response and specify which computers it can connect to, as follows.

  1. Go to Settings > Endpoint Protection > Live Response.
  2. Turn on Allow Live Response connections to computers.

    By default, Live Response can connect to all computers.

  3. If you want to prevent Live Response from connecting to specific computers, look under Exclusions, select computers in Available, and move them to Excluded.
  4. Click Save.

To turn on Live Response for servers, see Live Response for servers.

To start using Live Response, go to Devices, click a device to open its details page, and click Live Response. For details, see Start Live Response.