Strata Cloud Manager

1. Log in to Device Security in Strata Cloud Manager and select the device to lock.

   • From the Device Details page:
     Navigate to AssetsInventory and select the device that you want to lock. On the Device Details page, click on either the Alerts or Vulnerabilities tab, select the alert or vulnerability of concern, and select ActionsSend to…Lock the device via Jamf Pro.
   • From the Alert Details page:
     Navigate to AlertsSecurity Alerts and select the alert of concern. On the Alert Details page, select ActionsSend to…Lock the device via Jamf Pro.
   • From the alerts inventory:
     Navigate to AlertsSecurity Alerts and select the check box for the alert of concern. After you have chosen the alert, select MoreSend to…Lock the device via Jamf Pro.
   • From the Vulnerability Details page:
     Navigate to RisksVulnerabilities and select the vulnerability of concern. On the Vulnerability Details page, under Impact ViewActive Instances, select the check box for the vulnerability instance of concern. After you have chosen the instance, select MoreSend to…Lock the device via Jamf Pro.
2. In the Lock the device via Jamf Pro pop-up that appears, verify that the MAC address and IP address are for the device that you want to lock, and then add a comment.

3. Click OK to send the lock command to Jamf Pro.

   After you click OK, a link to the Cortex XSOAR work plan appears at the bottom of the pop-up. The link opens a new tab or window to see the Cortex XSOAR work plan for this action.

4. To confirm that the lock command successfully reached Jamf Pro, click the link to the Cortex XSOAR work plan for this action.

   For the link in Device Security to open the corresponding work plan in Cortex XSOAR, you must already be logged in to your cloud Cortex XSOAR instance before clicking on the link.

   If you have an on-premises Cortex XSOAR, you need to search the incidents on your Cortex XSOAR to find the work plan.

   Follow the path through the work plan to see if the action completed successfully, or to triage where the action could have failed.