Skip to main content
Magdalena
Visitor III
November 12, 2024
Question

FortiEMS quarantined a file with the same checksum as a file in my allowlist

  • November 12, 2024
  • 3 replies
  • 781 views

My FortiEMS has quarantined a file that has the excact same checksum as a file in my allowlist, its just the name thats different but it still got deleted from the client. But because the checksum is already listed in my allowlist i have no option to unblock the file. Has anyone an idea on why this happens and how i can unblock the file?

3 replies

Anthony_E
Staff
Staff
November 15, 2024

Hello ,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Staff
November 19, 2024

Hello,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards

Best Regards
Anthony_E
Staff
Staff
November 22, 2024

Hi,

 

Did you have a look at this KB article:

Technical Tip: How to restore the quarantine file blocked by real-time scan

 

Regards,

Best Regards