Hi,
I've a SIEM whichs sends a trigger when a virus is detected. the SIEM makes an API call to Clearpass, to reathorize the session.
reauthorize_session(sess, bearer, "CoA-Aruba-Role-Quarantined")
Now i need to define a CoA profile whichs terminate and quarantaine the device for a x time.
What profile do i need?