The Quarantine Management task is used to manage objects in the ERA Server quarantine - infected or suspicious objects found during the scan.
In the ERA Web Console, navigate to Admin > Client Tasks, select Quarantine Management from the Task Types list and then click New.
Enter basic information about the task, such as the Name, optional Description and the Task Type. The Task Type (see the list above) defines the settings and the behavior for the task. In this case you can use the Quarantine Management task.
Quarantine management settings
Action - Select the action to be taken with the object in Quarantine.
oRestore Object(s) (restores the object to its original location, but it will be scanned and if the reasons for the Quarantine persist, the object will be quarantined again)
oRestore Object(s) and Exclude in Future (restores the object to its original location and it will not be quarantined again).
oDelete Object(s) (deletes the object completely).
Filter type - Filter the objects in the Quarantine based on the criteria defined below. Either based on the hash string of the object or conditions.
Conditional filter settings:
oHash filter settings - Add hash items into the field. Only known objects can be entered, for example, an object that has already been quarantined.
oOccurred from/to - Define the time range, when the object was quarantined.
oMinimal/maximal size (bytes) - Define the size range of the quarantined object (in bytes).
oThreat name - Select a threat from the quarantined items list.
oObject name - Select an object from the quarantined items list.
Review the summary of configured settings and click Finish. The Client Task is now created and a pop-up window will open. We recommend that you click Create Trigger to specify when this Client Task should be executed and on which Targets. If you click Close, you can create a Trigger later on.