M T 0 Posted Thursday at 01:28 PM Share Posted Thursday at 01:28 PM Noticed a large amount of quarantine files on ESET protect on prem dating back a few years. is there a policy we can setup to delete any quarantine files that are older than 3months? also curious if the quarantined files are stored on the local device, would the file not delete if the device does not communicate? its a concern because some of the devices do not exist now Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,158 Posted Thursday at 01:48 PM Administrators Share Posted Thursday at 01:48 PM Normally there should not be many files in quarantine. Currently only manual deletion from each user's quarantine folder is possible. ie. "C:\Users\%user%\AppData\Local\ESET\ESET Security\Quarantine" and "C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine". Quote Link to comment Share on other sites More sharing options...
carmik 0 Posted Friday at 08:28 AM Share Posted Friday at 08:28 AM Adding to the OP's observation, our onprem Protect has more than 10000 files in quarantine, dating back to 2019. It would be nice having a policy/configuration setting to clean the oldest. Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,158 Posted Friday at 08:40 AM Administrators Share Posted Friday at 08:40 AM 11 minutes ago, carmik said: Adding to the OP's observation, our onprem Protect has more than 10000 files in quarantine, dating back to 2019. How many files do you have in quarantine on particular endpoints? Is it hundreds or thousands of files? Quote Link to comment Share on other sites More sharing options...
carmik 0 Posted Friday at 08:45 AM Share Posted Friday at 08:45 AM (edited) Hard to isolate which endpoint hosts the most files in quarantine. Taking a random sample, I see less than 10 files in it. Edited Friday at 08:45 AM by carmik Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.