topic Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? in Network Access Control https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541222#M518014 <HTML><HEAD></HEAD><BODY><P>Yes, but highly recommend you have Cisco account team send request to Kevin Gagnon (kegagnon) to submit customer name and business impact to assist with feature prioritization.</P></BODY></HTML> Thu, 08 Feb 2018 13:41:55 GMT Craig Hyps 2018-02-08T13:41:55Z How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541217#M518006 <HTML><HEAD></HEAD><BODY><P>Hi team, as the question title stated, how do I clear this flag without resorting to endpoint deletion.</P><P></P><P>Regards,</P><P>Sudhir</P></BODY></HTML> Wed, 07 Feb 2018 14:59:59 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541217#M518006 suddesai 2018-02-07T14:59:59Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541218#M518008 <HTML><HEAD></HEAD><BODY><P>looking at this guide it seems like the only way to clear is to remove the endpoint</P><P></P><P><A href="https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/200973-configure-anomalous-endpoint-detection-a.html" title="https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/200973-configure-anomalous-endpoint-detection-a.html">Configure Anomalous Endpoint Detection and Enforcement on ISE 2.2 - Cisco</A></P><P></P><P>will ask the SME</P></BODY></HTML> Wed, 07 Feb 2018 18:54:15 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541218#M518008 Jason Kunst 2018-02-07T18:54:15Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541219#M518010 <HTML><HEAD></HEAD><BODY><P>Thanks for the assistance, Jason.</P><P></P><P>Cheers,</P><P>Sudhir</P></BODY></HTML> Wed, 07 Feb 2018 18:55:39 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541219#M518010 suddesai 2018-02-07T18:55:39Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541220#M518011 <HTML><HEAD></HEAD><BODY><P>Correct.&nbsp; Currently Delete endpoint is only option.&nbsp; You could also export/delete/import via file or API to re-add endpoint so some of the key endpoint attributes like ID group, Guest values, Portal User, MDM, and custom attributes are recovered.&nbsp; Profiling info will be dynamically relearned.</P></BODY></HTML> Wed, 07 Feb 2018 21:42:00 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541220#M518011 Craig Hyps 2018-02-07T21:42:00Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541221#M518012 <HTML><HEAD></HEAD><BODY><P>Is there an existing enhancement request to provide a clearing function other than deletion for this? If not, we will open one.</P></BODY></HTML> Thu, 08 Feb 2018 13:38:12 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541221#M518012 suddesai 2018-02-08T13:38:12Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541222#M518014 <HTML><HEAD></HEAD><BODY><P>Yes, but highly recommend you have Cisco account team send request to Kevin Gagnon (kegagnon) to submit customer name and business impact to assist with feature prioritization.</P></BODY></HTML> Thu, 08 Feb 2018 13:41:55 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541222#M518014 Craig Hyps 2018-02-08T13:41:55Z Re: How do I clear the anomalous behavior flag from endpoints after resolving the anomalous behavior without deleting the endpoint? https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541223#M518018 <HTML><HEAD></HEAD><BODY><P>Alright, will do. Thanks!</P><P><BR />Cheers,</P><P>Sudhir</P></BODY></HTML> Thu, 08 Feb 2018 14:18:19 GMT https://community.cisco.com/t5/network-access-control/how-do-i-clear-the-anomalous-behavior-flag-from-endpoints-after/m-p/3541223#M518018 suddesai 2018-02-08T14:18:19Z