Step 1: Log into DeepArmor Admin
Step 2: Go to "Alerts" Tab
Step 3: Search for the threat you want to take the action for
Step 4: Click on the threat
On the top right corner you will see "Take Action" button. Click on it.
Step 5: "Take Action" button will open with a dropdown box and choose one of the three options:
Remote Remediate(BlackList): Quarantines process or terminates process on the certain device. This action does give the option to Global Blacklist
Remote Restore(WhiteList): Allows the alert on your system and gives you the option to whitelist.
External Remediate(BlackList on a certain Device): Quarantines file on the device that has the alert.