HI everyone,

Our windows file shares have the option enabled for Previous Version, this enables users to restore a previous version of a file on a share they have access to.

If a file triggers a rule during our scans the file is removed and placed in a quarantine, a stub file is left in its place giving options availabel to the user, one of which is to request a file restore from the DLP team. The user can bypass this process and simply restore the file from the Previous Version utility themselves, how does everyone else handle this, can the store for the previous versions be scanned and therefore quarantined?

Any advice appreciated.

Thanks

Ralph