Quarantine Directory Parent topic

If the action for an infected file is "Quarantine", the OfficeScan client encrypts the file and moves it to a temporary quarantine folder located in <Client installation folder>\SUSPECT and then sends the file to the designated quarantine directory.
Note
Note
You can restore encrypted quarantined files in case you need to access them in the future. For details, see Restoring Encrypted Files.
Accept the default quarantine directory, which is located on the OfficeScan server computer. The directory is in URL format and contains the server’s host name or IP address.
  • If the server is managing both IPv4 and IPv6 clients, use the host name so that all clients can send quarantined files to the server.
  • If the server only has or is identified by its IPv4 address, only pure IPv4 and dual-stack clients can send quarantined files to the server.
  • If the server only has or is identified by its IPv6 address, only pure IPv6 and dual-stack clients can send quarantined files to the server.
You can also specify an alternative quarantine directory by typing the location in URL, UNC path, or absolute file path format. Clients should be able to connect to this alternative directory. For example, the alternative directory should have an IPv6 address if it will receive quarantined files from dual-stack and pure IPv6 clients. Trend Micro recommends designating a dual-stack alternative directory, identifying the directory by its host name, and using UNC path when typing the directory.
Refer to the following table for guidance on when to use URL, UNC path, or absolute file path:

Quarantine Directory

Quarantine Directory
Accepted Format
Example
Notes
A directory on the OfficeScan server computer
URL
http:// <osceserver>
This is the default directory.
Configure settings for this directory, such as the size of the quarantine folder. For details, see Quarantine Manager.
UNC path
\\<osceserver>\ ofcscan\Virus
A directory on another OfficeScan server computer (if you have other OfficeScan servers on the network)
URL
http:// <osceserver2>
Ensure that clients can connect to this directory. If you specify an incorrect directory, the OfficeScan client keeps the quarantined files on the SUSPECT folder until a correct quarantine directory is specified. In the server's virus/malware logs, the scan result is "Unable to send the quarantined file to the designated quarantine folder".
If you use UNC path, ensure that the quarantine directory folder is shared to the group "Everyone" and that you assign read and write permission to this group.
UNC path
\\<osceserver2>\ ofcscan\Virus
Another computer on the network
UNC path
\\<computer_ name>\temp
A different directory on the OfficeScan client
Absolute path
C:\temp