Central Quarantine is there a future?
Created: 13 Mar 2012 | Updated: 20 Mar 2012 | 18 comments
Status:
Partially Implemented
This week I hope to install a new Central Quarantine due to hardware changes and I find I need to load the system with Windows 2003 server, 32-bit. I was planning on doing this on March 14th, 2012. So I'm curious if the technology is going to be advanced?
- Support for newer server operating systems, 64-bit.
- Ways to directly submit false positives (I posted this in another thread)
- A way to submit code for further analysis to the retail portal, the platinum portal, virustotal or threat expert. Bonus points for the ability to submit to competitor's portals. Why? Because it is us against the bad guys plus defense in depth means some of us have other products installed as well.
- Integration with the SEP console.
- Ability to restore files to original source
Group Ownership:
Comments 18 Comments • Jump to latest comment
Thanks for your suggestion. At this point we have no specific plans to update the Central Quarantine Server. However we may add some of these features into SEPM.
That would be great. Anything so that I don't have to "touch" malicious programs.
One more thing on the FP submission, while I'm asking for future wish list stuff. A raw code submission is good but if we could bundle, automatically, everything Security Response needs to make an informed & quick decision in the submission. Yea, that would be something, it would say Symantec has a commitment to get these things resolved!
The Central Quarantine Server will be supported on Windows 2008 64bit in the next release of SEP. Planned for SEP 11 RU7 MP2 and SEP 12.1 RU1 MP1.
Great to hear that! Germans love CQ! =)
It would be wonderful when CQ and the GUP Content Distrubution Monitor tool would be added directly into SEPM and not as added tools.
I just heard, good news.
Hi - how good is the general experience with central quarantine server in a large environment (1000's clients) and is it only supported from SEP 12.1 RU1 MP1? (we have RU1).
Thanks
MP-1 will be out this month, right?
SEP 12.1 RU1 MP1 is due out at the end of the month.
Looking forward to it.
A Combination of LUA + CQ is great for larger Enterprise Infrastructures. I'm using the tool for a very long time already
Confirmed: a new feature of SEP 12.1 Release Update 1, MP1 is that its Quarantine Server is supported on the Windows 64-bit operating system.
With thanks and best regards,
Mick
Thats fantastic! great to hear that =)
Note that upgrading SEP or the SEPM does not automatically upgrade the Central Quarantine. Be sure to upgrade that component to the new Qserver in the Tools folder/Tools CD. The version is "3.6.7180.64"
With thanks and best regards,
Mick
Anything new in the new Qserver?
I agreed 100% whit every suggestion from ScottM 2 in this post.
Thumbs up !
I downloaded the "SEP 12.1.1 MP1 Part2 Tools" from fileconnect, but it seems to be not 64bit capable. Also the readme.txt shows version 3.1, but in this threat it seems that there is a version 3.6
http://www.symantec.com/connect/forums/central-quarantine-64-bit
How do I get it? Why is it not included to the Part2 download?
Thanks!
Cnetral Quarintine 3.6 is included in SEP 12.1.2 (RU2) which is due out later this month (November 2012).
Just downloaded the Symantec_Endpoint_Protection_12.1.2_Part2_Tools_EN.exe, but there is still Version 3.1 included. How do I get 3.6?
Thanks!
*edit*
The readme.txt says that it is 3.1, but when you install it, it is 3.6 and it works on a 64-Bit machine.
Unfortunately you cannot install the QConsole 3.6 on a 64-Bit OS..what a pity!
Would you like to reply?
Login or Register to post your comment.