If the action for an infected file is "Quarantine",
the Security Agent encrypts the file and moves it to a temporary
quarantine folder located in <Agent installation folder>\SUSPECT and then
sends the file to the designated quarantine directory.
 |
NoteYou can restore encrypted quarantined files in case you need to access them
in the future.
|
Accept the default quarantine directory, which is located on the Apex One
server computer. The directory is in URL format and contains the server's host name
or IP
address.
-
If the server is managing both IPv4 and IPv6 agents, use the host name so that all Security Agents can send quarantined files to the server.
-
If the server only has or is identified by its IPv4 address, only pure IPv4 and dual-stack Security Agents can send quarantined files to the server.
-
If the server only has or is identified by its IPv6 address, only pure IPv6 and dual-stack Security Agents can send quarantined files to the server.
You can also specify an alternative quarantine directory by typing
the location in URL, UNC path, or absolute file path format. Security Agents should be
able to connect to this alternative directory. For example, the alternative directory
should have
an IPv6 address if it will receive quarantined files from dual-stack and pure IPv6
Security Agents. Trend Micro recommends designating a dual-stack
alternative directory, identifying the directory by its host name, and using UNC path
when typing
the directory.
Refer to the following table for guidance on when to use URL, UNC path,
or absolute file path:
Quarantine Directory
|
Quarantine Directory
|
Accepted Format
|
Example
|
Notes
|
|
A directory on the managing server computer
|
URL
|
http:// <osceserver> |
This is the default directory.
Configure settings for this directory, such as the size of the quarantine
folder.
|
|
UNC path
|
\\<osceserver>\ ofcscan\Virus |
||
|
A directory on another Apex One server computer (if you have
other Apex One servers on the network)
|
URL
|
http:// <osceserver2> |
Ensure that Security Agents can connect to this directory. If you specify an
incorrect directory, the Security Agent keeps the quarantined files on the SUSPECT folder until a
correct quarantine directory is specified. In the server's virus/malware logs, the
scan
result is "Unable to send the quarantined file to the designated quarantine folder".
If you use UNC path, ensure that the quarantine directory folder
is shared to the group "Everyone" and that you assign read and write permission to
this
group.
|
|
UNC path
|
\\<osceserver2>\ ofcscan\Virus |
||
|
Another endpoint on the network
|
UNC path
|
\\<computer_ name>\temp |
|
|
A different directory on the Security Agent
|
Absolute path
|
C:\temp |