Quarantine management

The Quarantine Management task is used to manage objects in the ERA Server quarantine - infected or suspicious objects found during the scan.

In the ERA Web Console, navigate to Admin > Client Tasks, select Quarantine Management from the Task Types list and then click New.

icon_section Basic

Enter basic information about the task, such as the Name, optional Description and the Task Type. The Task Type (see the list above) defines the settings and the behavior for the task. In this case you can use the Quarantine Management task.

icon_section Target


It is not possible to add Targets while creating a Client Task. You will be able to add Targets after the task has been created. Configure Settings for the task and click Finish to create the task and then create a Trigger to specify Targets for the task.


icon_section Settings

Quarantine management settings

Action - Select the action to be taken with the object in Quarantine.

oDelete Object(s) (deletes the object completely).

NOTE: Restore Object(s) and Restore Object(s) and Exclude in Future option is not available, because there is no API for that in VMware's Guest Introspection.

Filter type - Filter the objects in the Quarantine based on the criteria defined below. Either based on the hash string of the object or conditions.

Conditional filter settings:

oHash filter settings - Add hash items into the field. Only known objects can be entered, for example, an object that has already been quarantined.

oOccurred from/to - Define the time range, when the object was quarantined.

oMinimal/maximal size (bytes) - Define the size range of the quarantined object (in bytes).

oThreat name - Select a threat from the quarantined items list.

oObject name - Select an object from the quarantined items list.

icon_section Summary

Review the summary of configured settings and click Finish. The Client Task is now created and a pop-up window will open. We recommend that you click Create Trigger to specify when this Client Task should be executed and on which Targets. If you click Close, you can create a Trigger later on.