In the cloud platform there may be times when you will need to swap between the Endpoint protection (EP) and Incident response (IR) pieces. To do this, please follow these instructions:
- Log into the Cloud platform and go into the settings>policy panes and open up the policy you want to edit.
2. Go to the respective product you would like to enable and click the button to turn it on:
If you are enabling it with Endpoint protection already enabled, it will prompt you with this message:
Note: Like the message above, both EP and IR pieces cannot be enabled at the same time.
Click on Yes and it will enable Incident Response.
3. Once you are finished configuring the policy, click the OK button in the bottom right to save the policy.