IBM Tivoli and Cisco - Manual (Page 270)

252 Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
10.The posture token remains Cisco:PA, however the posture token value should
be changed to
Quarantine
, as shown in Figure 7-34. In the notification string,
add the line:
http://tcmweb/SoftwarePackageServerWeb/SPServlet
Figure 7-34 Quarantine condition applied as default action
Note: http://tcmweb/SoftwarePackageServerWeb/SPServlet is the location
of the software remediation package. The URL can be changed depending
on where the remediation software packages are stored.