Endpoint Protection

 View Only

  • 1.  Testing Central Quarantine forwarding for Scan Engine 5.2.5

    Broadcom Employee
    Posted Oct 19, 2009 04:37 PM
    Does anyone have any idea how to test that Scan Engine can forward to a Central Quarantine server? Scan Engine 5.2.5 will just delete EICAR and will not forward it. The only other way i can see to test it is using a live virus which is of course not something I can do.


  • 2.  RE: Testing Central Quarantine forwarding for Scan Engine 5.2.5

    Posted Oct 19, 2009 05:05 PM

    Try to  change the "First action" for Non-macro virus to "Quarantine risk" for EICAR to be Quarantined locally and forwarded to the Central Quarantine Server.


  • 3.  RE: Testing Central Quarantine forwarding for Scan Engine 5.2.5

    Posted Oct 19, 2009 06:18 PM
    Just go with a live virus :)
    Grab some out of the quarantined executables on your incoming mail server.
    Obviously be very careful about how you handle them but it really isn't that hard.

    Z