Centralized quarantine

Centralized quarantine is a powerful feature that enables administrators to work with quarantined files on clients with ease. It makes operations like viewing, deleting, restoring quarantined files and excluding them from further scanning simpler tasks. It is accessible via the Quarantine window in the main console panel or client properties. The main quarantine window displays complete information about the file and threat name, hash, date/time of the first and last occurrence, file size and the number of occurrences.

NOTE: Please note that the fields Object Name, File Name and Extension shows first three objects only. For detailed information open the Properties window either by pressing the F3 key or by double-clicking the selected item.

Centralized quarantine provides an overview of quarantined files which are stored locally on the clients with an option to request them on demand. When a file is requested, it is copied to the ERA Server in a safe, encrypted form. For safety reasons, decryption is performed upon saving the file to the disk. For instructions on working with quarantined files, see chapter Restore/Delete from Quarantine Task.

NOTE: Centralized quarantine requires installation of EAV/ESS version 4.2 or newer on clients.