Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEPM Should release Quarantine File if its Genuine

Created: 16 Sep 2009 | 2 comments
Rafeeq's picture
1 Agree
1 Disagree
0 2 Votes
Login to vote

Hi,

I just came across an issue where SEP Quarentined a genuine file.

The file has been moved  to Quarantine Folder.

In SEPM console we can see where to put the Quarantine Files(Antivirus Policy)  , however we really do not have any info about the files to see whats in Quarantined.

The files reside on the clients machine( not using the Centralized option here)

It would be very had for a admin to release a quarantine file which is in Singapore Server.

It would be good, if we can see what all has been Quarantined so far. and RESTORE option should be initated from the SEPM Console.

Once its done, this can be added to Centralized Exception like the same way we do for Processes, Here we shall add folder Path.

Comments

Jeremy Dundon's picture
16
Sep
2009
2 Votes +2
Login to vote

THis function is already available.

When you look at a risk log from Monitors->Logs you can select the threat and choose 'release from quarantine' from the drop-down at the top.

You can also choose to add to a centralized exceptions policy from the same drop-down.

Rafeeq's picture
16
Sep
2009
0 Votes 0
Login to vote

Hello Jeremy

Thank you for pointing me in the right direction.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq