Endpoint Protection

 View Only

  • 1.  quarantine USB threats

    Posted Dec 07, 2009 03:19 PM


    Is it possible to configure Symantec 10.1  to quarantine infected files that are detected on a USB stick/pen drive?  If so, how?
    This is so I'm able to capture the infected file for submission to determine if its a false-positive.

    Thanks in advance.



  • 2.  RE: quarantine USB threats
    Best Answer

    Posted Dec 07, 2009 03:25 PM
     USB drives are taken as external drives and permission on them are different.
    So if SAV is not able to take any action on it it will block it. When it tries to copy itself to system then only SAV will quarantine or delete the file.

    For File System Auto-Protect you change the 1st action as Quarantine and second as Clean. then SAV will Quarantine the files.