Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Symantec Protection 5.1 for SharePoint Quarantines Only Published Major Version

  • 1.  Symantec Protection 5.1 for SharePoint Quarantines Only Published Major Version

    Posted Feb 15, 2011 11:28 AM

    I'm seeing a rather significant issue in the quarantining of files.  If a file is deemed "infected" (truly infected, unscannable, etc.) it is placed in the quarantine folder and then deleted from the SharePoint farm.  The issue is as follows: that file that was quarantined is the last major version published, not the actual latest file.  So, if a scan flags file version 5.12 as infected and quarantines it, it quarantines 5.0, and deletes 5.12, thereby losing the 12 minor versions that were created.  Restoration of the quarantined file is incorrect, as the engine doesn't quarantine the last version, only the last published version.

    To me, this is a serious issue.

    Is this a known issue by Symantec?  If so, is there a workaround?

    Thanks for any input. - M



  • 2.  RE: Symantec Protection 5.1 for SharePoint Quarantines Only Published Major Version

    Posted Feb 15, 2011 01:19 PM

    Sounds like a defect... you'll want to double-check with Support to verify, or get an investigation started. Quarantining one file and deleting another is BAD and absolutely not something we should be doing. We also take these situations (data loss due to our product) very seriously. 

    https://support.broadcom.com (Tech Support)