Quarantine Management

The Quarantine Management task is used to manage objects in the ESMC Server quarantine - infected or suspicious objects found during the scan.

Basic

Enter basic information about the task, such as the Name and optional Description. Task Category and Task Type are pre-selected based on your previous choice. The Task Type (see the list of all Client Tasks) defines the settings and the behavior for the task.

Settings

Quarantine management settings

Action - Select the action to be taken with the object in Quarantine.

Restore Object(s) - Restores the object to its original location, but it will be scanned and if the reasons for the Quarantine persist, the object will be quarantined again.

Restore Object(s) and Exclude in Future - Restores the object to its original location and it will not be quarantined again.

Delete Object(s) - Deletes the object permanently.

Filter type - Filter the objects in the Quarantine based on the criteria defined below. Either based on the Hash string of the object or Conditions.

Conditional filter settings:

Hash filter settings - Add hash items into the field. Only known objects can be entered, for example, an object that has already been quarantined.

Occurred from/to - Define the time range when the object has been quarantined.

Minimal/Maximal size (bytes) - Define the size range of the quarantined object (in bytes).

Threat name - Select a threat from the quarantined items list.

Object name - Select an object from the quarantined items list.

Summary

Review the summary of configured settings and click Finish. The Client Task is now created and a pop-up window will open. We recommend that you click Create Trigger to specify when this Client Task should be executed and on what Targets. If you click Close, you can create a Trigger later. To create a trigger afterward, select the client task instance and select Run on from the drop-down menu.

client_task_finish