What happens when a device fails a Host Integrity check?

When a devicefails a Host Integrity checkin Symantec Endpoint Protection (SEP), it isquarantined. This means that the device’s access to network resources may be restricted to prevent potential security risks from spreading within the network. Quarantine helps contain devices that do not meet the configured security standards, protecting the overall network integrity.

Purpose of Quarantine on Host Integrity Failure:

Host Integrity checks ensure that endpoint devices comply with security policies, such as having up-to-date antivirus signatures or required patches.

If a device fails this check, quarantine limits its network connectivity, enabling remediation actions without exposing the network to possible risks from the non-compliant device.

Why Other Options Are Less Suitable:

Antimalware scans(Option A) anddevice restarts(Option B) are not default responses to integrity check failures.

Administrative notifications(Option D) may be logged but do not provide containment as quarantine does.

References: Quarantining non-compliant devices is a standard response to Host Integrity check failures, ensuring network protection while remediation occurs​.