Quarantine Directory

Views:

If the action for an infected file is "Quarantine", the Security Agent encrypts the file and moves it to a temporary quarantine folder located in <Agent installation folder>\SUSPECT and then sends the file to the designated quarantine directory.

Note

You can restore encrypted quarantined files in case you need to access them in the future.

Accept the default quarantine directory, which is located on the Apex One server computer. The directory is in URL format and contains the server's host name or IP address.

If the server is managing both IPv4 and IPv6 agents, use the host name so that all Security Agents can send quarantined files to the server.
If the server only has or is identified by its IPv4 address, only pure IPv4 and dual-stack Security Agents can send quarantined files to the server.
If the server only has or is identified by its IPv6 address, only pure IPv6 and dual-stack Security Agents can send quarantined files to the server.

You can also specify an alternative quarantine directory by typing the location in URL, UNC path, or absolute file path format. Security Agents should be able to connect to this alternative directory. For example, the alternative directory should have an IPv6 address if it will receive quarantined files from dual-stack and pure IPv6 Security Agents. Trend Micro recommends designating a dual-stack alternative directory, identifying the directory by its host name, and using UNC path when typing the directory.

Refer to the following table for guidance on when to use URL, UNC path, or absolute file path:

Quarantine Directory	Accepted Format	Example	Notes
A directory on the managing server computer	URL	`http:// <osceserver>`	This is the default directory. Configure settings for this directory, such as the size of the quarantine folder.
A directory on the managing server computer	UNC path	`\\<osceserver>\ ofcscan\Virus`
A directory on another Apex One server computer (if you have other Apex One servers on the network)	URL	`http:// <osceserver2>`	Ensure that Security Agents can connect to this directory. If you specify an incorrect directory, the Security Agent keeps the quarantined files on the SUSPECT folder until a correct quarantine directory is specified. In the server's virus/malware logs, the scan result is "Unable to send the quarantined file to the designated quarantine folder". If you use UNC path, ensure that the quarantine directory folder is shared to the group "Everyone" and that you assign read and write permission to this group.
	UNC path	`\\<osceserver2>\ ofcscan\Virus`
Another endpoint on the network	UNC path	`\\<computer_ name>\temp`
A different directory on the Security Agent	Absolute path	`C:\temp`

Keywords: quarantine directory