After an Endpoint Protection client is quarantined by ATP 3.0, the client still has full network access.

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

You Isolate a client running SEP 14 RU1 in Advanced Threat Protection 3.0, but the client still has network access

Resolution

Verify that all steps Kb document https://support.symantec.com/en_US/article.HOWTO126868.html have been followed.

If you still experience this issue, please contact Symantec technical support for further analysis.