Video Screencast Help

Symantec Protection 5.1 for SharePoint Quarantines Only Published Major Version

Created: 15 Feb 2011 • Updated: 15 Feb 2011 | 1 comment

I'm seeing a rather significant issue in the quarantining of files.  If a file is deemed "infected" (truly infected, unscannable, etc.) it is placed in the quarantine folder and then deleted from the SharePoint farm.  The issue is as follows: that file that was quarantined is the last major version published, not the actual latest file.  So, if a scan flags file version 5.12 as infected and quarantines it, it quarantines 5.0, and deletes 5.12, thereby losing the 12 minor versions that were created.  Restoration of the quarantined file is incorrect, as the engine doesn't quarantine the last version, only the last published version.

To me, this is a serious issue.

Is this a known issue by Symantec?  If so, is there a workaround?

Thanks for any input. - M

Comments 1 CommentJump to latest comment

Ryan_Dasso's picture

Sounds like a defect... you'll want to double-check with Support to verify, or get an investigation started. Quarantining one file and deleting another is BAD and absolutely not something we should be doing. We also take these situations (data loss due to our product) very seriously. 

1-800-342-0652 (Tech Support)