Security

Is there any way to manually remove or reset a quarantine token once issued?  We had to increase the check time to 10 hours to stop OnGuard interfering with some VPNs and S.A.P. connections on some users machines.  This apparently also changes the expiry time of OnGuard tokens.  We've had a bunch of people get quarantines due to issues with Cisco SIG secure DNS software and we can't repair it because SIG needs to get to the net to fully update and start working again.  Sending a notification to the client to allow access seems to do nothing when it's got the SIG problem, possibly because SIG is in the way and not working correctly.  I have been asked if there's a way to manually give the laptop access again, possibly by deleting the user from the database on the Clearpass server.  Is this possible?

Wouldn't you be better off allowing the required communication while the device has been marked as quarantined?