ISE 2.1 FMC 6.1 ANC Unquarantine

[Daniel Lucas]

How do you unquarantine an endpoint once FMC has instructed ISE to quarantine it? Manually entering the MAC address under 'Operations->Adaptive Network Control -> Endpoints -> EPS Unquarantine' doesn't do anything...it's also confusing because the endpoint list under Adaptive Network Control is empty:

[jeppich]

Hi, you should be able to pull this from the ISE reports

[vaguirre17]

thanks.

So I could see information in this section? Is  that a normal behavior?

[jeppich]

Yes, you should see the quarantined endpoints, and yes this is normal behavior

[vaguirre17]

Thanks John.
I mean. Is a normal behavior in this version can't see a list of quarantine devices? Is there any way to could see in the policy assignment
section?

[jeppich]

Yup, this is normal behavior. Nope you cannot see this under the ANC policy assignment, since Firepower is using ANC 1.0, subscribing to the EndpointProtection Service Capability and using Session:EPSStatus:Quarantine for the ISE Authorization policy.