Showing results for 
Search instead for 
Did you mean: 

NSM API - Quarantine Host generates error

So I am doing some scripting against the NSM's API to test its functionality and when creating a post to Quarantine a test host - it returns an error stating "Internal Error Message: Agent Not Supported". The payload mimics the one in the NSM API Guide and I can't locate the cause of the error.

To give a little more information about the environment - we are using NSM version 9.1 and the validation/authentication is already working as I can use other commands such as heartbeat and grabbing attacks. Currently, I am using Python as a base to make the request to test it out. The idea would be to remotely be able to quarantine a host IP for a specific amount of time similar to how the IPS can do it automatically for attacks.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator