If Action For Suspicious Files is set to Quarantine on the Threat Policy page, suspicious files are put into quarantine by the Malware Protection Component (MPC) of the Barracuda Content Shield Suite for later inspection by an administrator. For definition of malicious versus suspicious files, see How to Set Threat Policies. Click on Quarantine in the left navigation menu to view quarantined files for the endpoint. You can search by device, user, file name, or file extension. Data displayed in Quarantine includes:
-
Detected On – Date file was detected.
- Device – Endpoint on which the file was detected.
- Username – Username at endpoint.
- File – Name of file.
-
Report – Click the report icon to view threat report in a new window.
- Restore – Click Restore to send a command to the endpoint MPC that placed the file in quarantine to restore that file. Until the MPC does a restore, the web interface shows Restore Pending. After the MPC receives the command, the file is restored from quarantine. NOTE: This action cannot be undone.
-
Delete – Click (
) to send a command to the endpoint MPC that placed the file in quarantine to delete that file. Until the MPC deletes the file, the web interface shows Delete Pending. After the MPC receives the command, the file is deleted from quarantine.
To sort the rows in the Quarantine display, click the arrows to the right of each column title.
To change the date range of the display, select Last 7 days, Last 30 days or Last 24 Hours from the drop-down on the upper right of the page.
To change the Quarantine view, select the number of rows to display using the Rows per page drop-down at the bottom of the display.