Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Previous Version or Shadow Copy

Created: 08 Oct 2012 | 1 comment

HI everyone,

Our windows file shares have the option enabled for Previous Version, this enables users to restore a previous version of a file on a share they have access to.

If a file triggers a rule during our scans the file is removed and placed in a quarantine, a stub file is left in its place giving options availabel to the user, one of which is to request a file restore from the DLP team. The user can bypass this process and simply restore the file from the Previous Version utility themselves, how does everyone else handle this, can the store for the previous versions be scanned and therefore quarantined?

Any advice appreciated.

Thanks

Ralph

Comments 1 CommentJump to latest comment

stumunro's picture

Ralph,

 

you you can quarantine the file this is configured wher eyou set up the scan, you need to create a response rule and it willleave a little note behnd to tell them where to find the file and who to contact..