The quarantine feature provides a safe way for you to store suspicious or malicious content as identified by Forefront Protection 2010 for Exchange Server (FPE). By default, FPE creates a copy of every detected file in its original form (that is, before any action occurs). When a file is quarantined, it is encoded so that the file cannot be accidentally executed or opened. In the event of a false positive classification, you can recover the quarantined file by saving it to disk or by delivering it to recipients.

Each quarantined item is stored as its own file in the Quarantine subfolder under the FPE data folder. For the location of the default data folder on your operating system, see Default folders.

Note:
If you are using Forefront Online Protection for Exchange (FOPE), any mail quarantined by FOPE can be accessed via the FOPE Admin Center. For more information about configuring quarantine options for this optional product, see Configuring Forefront Online Protection for Exchange quarantine options.
Note:
If you enable the Exchange Transport Decryption agent, Rights Management Services (RMS)-protected mail is not quarantined, though a record is still maintained in the incidents database. For more information about enabling this agent, see your Exchange server documentation.

Related Topics