ISE Integration with Firepower

[xili5]

Hi,

I am working on demo for ISE/firepower integration through PxGrid. Rely to firepower correlation function, when firepower detected a predefined intrusion event, then told ISE to quarantine the endpoint. I can create another correlation policy on firepower to tell ISE unquarantine the endpoint.

My question is that is it possible to unquarantine this endpoint on ISE manually?

[Charlie Moreton · Accepted solution]

Yes, you can go to Operations > Adaptive Network Control > Endpoint Assignment.  There may or may not be MAC addresses in this list.  Click the EPS unquarantine button and enter the MAC Address of the quarantined endpoint and click the Unquarantine button.

This will manually unquarantine the endpoint.

[kvenkata1]

Please see the discussion on a similar topic

Re: Unquarantine Endpoint in ISE