Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Enabling restore to client of falsely quarantined items from SEPM

Updated: 21 Apr 2010 | 5 comments
blenahan's picture
11 Agree
0 Disagree
+11 11 Votes
Login to vote
Status: Reviewed

Can you look into enabling an easy way from the SEPM to restore a file (false positive) that SEP quarantined back to all machines that it was quarantined from?  From the Central Quarantine server, it looks like I can only restore it locally, and am now manually copying the file back out to the client computers.  I have already added the file to the Central Exceptions policy for workstations from the SEPM Risk Report.

Comments

Derrick Farley's picture
20
Apr
2010
0 Votes 0
Login to vote

Agreed

This would be an excellent addition to the product. Thank you for the post.

JimW's picture
21
Apr
2010
0 Votes 0
Login to vote

Good idea, I am going to try

Good idea, I am going to try to deliver this feature in a post Amber release.

Keep voting

Jim Waggoner Director Product Management, Symantec Endpoint Protection, Enterprise Security Group, Symantec

MonicaDM's picture
01
Sep
2010
0 Votes 0
Login to vote

I also agree. This seems to

I also agree. This seems to be a common question and/or issue. 

Thank you for posting this question. 

kthompson628's picture
01
Sep
2010
0 Votes 0
Login to vote

Restore quranatine files from Management Console

This was available in 10.0 and would be extremely helpful in the event of a large number of machines being affected by having a false-positive quarantined.

ChrisMatt's picture
22
Aug
2011
0 Votes 0
Login to vote

Manage quarantined files centrally!

The same false positive has been found on several computers in our network. It's a self written .exe file and I'm shure, that it's clean. I put the file into the exclusion lists already. Now I have to copy the file back manually to the clients harddrive. That's very time-consuming. It would be great to have access to the client's quarantine from sepm to manage their quarantined files centrally.