Redesigned automated response policy

Datto EDR now makes it easier to configure automated threat responses with severity-based policy templates. This gives your team a consistent response baseline across detection rules without requiring you to configure each rule individually.

Choose from Minimal, Moderate or Aggressive templates to define whether Kill, Quarantine or Isolate actions apply at Low, Medium, High and Severe severity levels. For greater control, rule-specific overrides can still be applied and take priority over the severity-level settings.

Existing policies are automatically mapped to the closest template, while unique configurations carry over as rule-specific overrides. This helps MSPs standardize threat response across environments while preserving the controls they already rely on.

Learn more about redesigned automated response policy for Datto EDR here.