Hi,
Wondering if anyone knows if SEP 12 has the ability to look for a certian file and quarintine it if found. e.g. look for a word document called "test.doc" and if it is found the quarantine the file.
any ideas?
This is not a possibility within SEP and is outside the scope
You can monitor for applications though and take action on them, see here:
https://www-secure.symantec.com/connect/articles/how-utilize-sep-121-incident-response-part-1
Do you need more assistance with your problem or were you able to get it resolved? If you could post an update for followers of this thread that would be most helpful. Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. This will benefit admins looking for a resolution to the same problem. Thanks and take care, Brian