Retrieves quarantine policy rules in human-readable format and configured quarantine actions with network restriction details
https://{server-hostname}:8383/dcapi/compliance/quarantine/policy/{grpResourceId}/ruleActionDetails
VulnerabilityMgmt.READCopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Custom group resource ID. Fetch from Get Quarantine Rule Details
curl --request GET \
--url https://appdomain/dcapi/compliance/quarantine/policy/{grpResourceId}/ruleActionDetails \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52'List of quarantine rules in human-readable format. Each item is a map with ruleN keys
List of quarantine action configurations
Action type. Quarantine or Audit Only
Network restriction description
Allowed domain patterns (for blockAction=2)
Allowed IP ranges (for blockAction=2)
Allowed VPN name (for blockAction=2)
Last policy modification timestamp
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Quarantine policy rules and action configuration
{
"quarantineActions": [
{
"actionType": "Quarantine",
"allowAccessToVPN": "corporate-vpn",
"lastModifiedTime": "Mar 20, 2026 02:30 PM",
"allowAccessToCertainDomain": "*.company.com",
"allowAccessToCertainIP": "10.0.0.0/24",
"quarantineNetwork": "Block all & allow access to custom Domain,IP and VPN"
}
],
"quarantineRules": [
{
"rule1": "OS Patch - Critical - More than 30 Days"
},
{
"rule2": "Software - TeamViewer - Installed"
},
{
"rule3": "Vulnerability - CVSS Value - is Above 7.0"
},
{
"rule4": "Vulnerability - Exploit Availability - Exploit Available"
}
]
}
Audit-only quarantine policy (no network restrictions)
{
"quarantineActions": [
{
"actionType": "Audit Only",
"lastModifiedTime": "Mar 25, 2026 09:00 AM"
}
],
"quarantineRules": [
{
"rule1": "OS Patch - Critical - More than 15 Days"
}
]
}
Authentication credentials are missing or invalid
{
"errorMessage": "Authentication required",
"errorCode": "UNAUTHORIZED"
}
Quarantine is not available in VMP Professional Edition
{
"errorMessage": "You do not have enough permission to perform this action. Upgrade to Enterprise Edition to use these features.",
"errorCode": "FORBIDDEN"
}
API call threshold exceeded
{
"errorMessage": "Rate limit exceeded. Retry after some time",
"errorCode": "TOO_MANY_REQUESTS"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.