Endpoint Protection

 View Only
  • 1.  Central Quarantine

    Posted Dec 21, 2009 06:38 AM
    I would like to install Central Quarantine Server into the Symantec Endpoint Protection Manager PC. It that OK or Not? My SEPM is Window XP. It there any instruction of install Central Quarantine? 


  • 2.  RE: Central Quarantine
    Best Answer

    Posted Dec 21, 2009 06:44 AM
    YES   you can  install Central Quarantine on the pc which has SEPM installed

    Installing and configuring the Central Quarantine

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008072900433448

    It is not recommended that Quarantine Server be used in smaller SEP environments of less than 10,000 clients.


  • 3.  RE: Central Quarantine



  • 4.  RE: Central Quarantine

    Posted Mar 04, 2010 04:46 PM
    Why is Quarantine Server not recommended on small deployments? Does it hog resources?
    What other methods does the SEPM administrator have available to gather samples on small/medium sized deployments?
    I manage several small, disconnected networks so we cannot directly submit any info to Symantec anyway. I did install and maintain a Central Quarantine server on our SAVCE infrastructure but seldom used it. We are migrating to SEP 11 now so I'd rather keep the deployment as simple as possible. Would a quarantine server be basically useless under these circumstances?


  • 5.  RE: Central Quarantine

    Posted Apr 29, 2010 10:31 AM
    Here's my take on that recommendation - bunk.
    It's amazing how much I use it at times, and how useful it can be for:
    A central place to restore and submit samples
    Reporting
    Monitoring what's being quarantined from a central screen and not have to fumble with SEPM reports which are slow, cumbersome, and pretty much useless unless you like pretty pie charts.
    I love quarantine server, and if they'd bring back the full functionality it had and was capible of back 10 years ago with SAV, I think a whole lot of quarantine servers would be going up right now.
    IMO, "try it, you'll like it"
    I just don't understand that 10,000 user threshold, HOWEVER, Symantec also said that enterprises as small as us would never see many "new, unknown risks" and gave me the number of no more than 6 in a full year, and have little need to submit samples anyway. I blew that away in February when by the time March came around, I'd already submitted over 6 samples, many of which were NEW risks. LOL.  And we are only about 350 users!