Quarantine Directory

If the action for an infected file is "Quarantine", the OfficeScan agent encrypts the file and moves it to a temporary quarantine folder located in <Agent installation folder>\SUSPECT and then sends the file to the designated quarantine directory.

Note:

You can restore encrypted quarantined files in case you need to access them in the future.

For details, see Restoring Encrypted Files.

Accept the default quarantine directory, which is located on the OfficeScan server computer. The directory is in URL format and contains the server's host name or IP address.

  • If the server is managing both IPv4 and IPv6 agents, use the host name so that all OfficeScan agents can send quarantined files to the server.

  • If the server only has or is identified by its IPv4 address, only pure IPv4 and dual-stack OfficeScan agents can send quarantined files to the server.

  • If the server only has or is identified by its IPv6 address, only pure IPv6 and dual-stack OfficeScan agents can send quarantined files to the server.

You can also specify an alternative quarantine directory by typing the location in URL, UNC path, or absolute file path format. OfficeScan agents should be able to connect to this alternative directory. For example, the alternative directory should have an IPv6 address if it will receive quarantined files from dual-stack and pure IPv6 OfficeScan agents. Trend Micro recommends designating a dual-stack alternative directory, identifying the directory by its host name, and using UNC path when typing the directory.

Refer to the following table for guidance on when to use URL, UNC path, or absolute file path:

Table 1. Quarantine Directory

Quarantine Directory

Accepted Format

Example

Notes

A directory on the managing server computer

URL

http:// <osceserver>

This is the default directory.

Configure settings for this directory, such as the size of the quarantine folder.

For details, see Quarantine Manager.

UNC path

\\<osceserver>\ ofcscan\Virus

A directory on another OfficeScan server computer (if you have other OfficeScan servers on the network)

URL

http:// <osceserver2>

Ensure that OfficeScan agents can connect to this directory. If you specify an incorrect directory, the OfficeScan agent keeps the quarantined files on the SUSPECT folder until a correct quarantine directory is specified. In the server's virus/malware logs, the scan result is "Unable to send the quarantined file to the designated quarantine folder".

If you use UNC path, ensure that the quarantine directory folder is shared to the group "Everyone" and that you assign read and write permission to this group.

UNC path

\\<osceserver2>\ ofcscan\Virus

Another endpoint on the network

UNC path

\\<computer_ name>\temp

A different directory on the OfficeScan agent

Absolute path

C:\temp