For
a quarantined device to be valid in a policy on a firewall, a GlobalProtect
user must successfully log in to GlobalProtect from the quarantined
device, and the firewall must be aware of that login event. If the
firewall is configured as a GlobalProtect gateway, the user can
log in to that gateway from the quarantined device to validate the
device in the policy. After a user successfully logs in to a gateway
from a quarantined device, the gateway enforces the policy, and
you can
redistribute the quarantined
device information and have it enforced in a policy on any
firewall or gateway in your network. If the user is blocked from
logging in to the gateway (for example, if you have selected
Block
login for quarantined devices
in the gateway configuration),
that login is not counted as a successful login.