Skip to content

Commit 17dc555

Browse files
authored
Update respond-file-alerts.md
Adding a note about timeout for the action
1 parent 6ae5d91 commit 17dc555

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

defender-endpoint/respond-file-alerts.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -91,6 +91,7 @@ This action takes effect on devices with Windows 10, version 1703 or later, and
9191

9292
> [!NOTE]
9393
> The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file).
94+
> The Stop and quarantine action has a maximum timeout period of 3 days. If the targeted device remains offline for longer than this period after the action is initiated, the action will not be delivered to that device. To ensure the file remains blocked beyond the timeout or after the action completes, it's recommended to create an indicator to block the file explicitly.
9495
9596
2. Go to the top bar and select **Stop and Quarantine File**.
9697

0 commit comments

Comments
 (0)