Quarantine Management
R81 Harmony Endpoint Server Administration Guide|331
Best practice is to configure Copy quarantine files to a central location in the
"File
Quarantine Settings" on page317
. Then you can use the Quarantine Manager for
Administrators to import all files related to an incident from one location that you can access.
From the Quarantine Manager for Administrators you can:
n
Restore files in a protected location to test them.
n
Collect all malicious files related to an attack for research.
To permanently delete an item:
1. Open the Harmony Endpoint Quarantine Manager for Administrators.
2. Select one or more items.
3. Click Delete.
To send a file to quarantine from outside of the utility:
1. Open the Harmony Endpoint Quarantine Manager for Administrators.
2. Click Quarantine.
3. In the window that opens, browse to select the file to move to quarantine.
To import a suspicious file to the utility:
1. Open the Harmony Endpoint Quarantine Manager for Administrators.
2. Click Import.
3. In the window that opens, browse to select the quarantined file to import.
The file, with its metadata, is imported to the quarantine database from where the utility
is run.
To Next Page