Endpoint Protection

Hi Team,

Qurantine size increasing on Server 2008 and client version is 12.1 RU2.

Which setting can i configure so Qurantine size decrease as well as How can i configure Limite of size.

Open your AV policy and select the Quarantine tab. Than click the Cleanup tab

Under the Quarantined Files heading, make the changes here

Hi,

You can limit the size of quarantine folder through SEPM. 

Logon to SEPM console -->Click on policies -->Select Antivirus and Antispyware policy-->Select Quarantine option -->Select Cleanup tab on right side of screen -->Make necessary changes

You can modify default settings. Default setting is 30 days to delete quarantine files, you can change it to 1-2 days. Also select option to delete oldest files to limit older folder size at 50 MB.

Managing the Quarantine

http://www.symantec.com/docs/HOWTO80950

Hope that helps!!

You say the quarantine size is increasing, are you getting a large amount of detections? False positives?

Hi

Please refer the link below

http://www.symantec.com/business/support/index?page=content&id=HOWTO80952&actp=search&viewlocale=en_US&searchid=1366706667181

Regards

Hi Team,

We have configure

Repaire file:3 Day

Backup file:2 Day

Qurantine  file :1 Day

Size:10 MB

Hi cameron,

We are getting Large amount of Detection.

Example :1 Sec =814 Kb

But still Problem is not Reslove.

What is exact name of the file being detected? Does it start with DWHxxx.tmp?

Hello,

You please share us the Risk logs from the SEP client / SEPM ?

Also, please let us know the name of the Risk detected, path and file name?

Is the risk being detected only on 1 client or a number of clients across the network?

In case, this is in reference to the DWHxxx.tmp? Check this Article:

tmp file (DWH*****.tmp) detected as  Trojan.Gen or Trojan.Gen.2 by Corp products

http://www.symantec.com/business/support/index?page=content&id=TECH102953

Hope that helps!!

Choose  do nothing option when new definition download.

Refer following KB article.

http://www.symantec.com/business/support/index?page=content&id=TECH102953&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D13667351098787730Ux97v8u36PC4211f8wHjDEk2e4Lhf7v5X