SEP client (with SWG tunnel enabled) still having internet access despite being in Quarantine location

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

SEP client deployed with SWG tunnel via Web and Cloud Access Protection, is maintaining internet access while it's location has been changed to Quarantine.

Environment

Any SEP 14.3.x version deployed with SWG tunnel.

Resolution

This is an expected behavior, Network traffic will go through the WSS tunnel first. If any traffic is bypassed from WSS, then it will reach the FW.

If we need to stop this traffic also from being generated then we need to disable Web and Cloud Access Policy.