How to work with alerts and quarantine
Hi guys, I'm new to FortiClient and EMS and I'm lost. In any security system I've seen in the past:
1) I could acknowledge alerts
1) I could delete or recover quarantine files
Now in my brand new EMS I've got this client with 5 AV alerts and I cannot clear them up. If I go on the client and open the local FortiClient console, I found 6 threats (not 5) and 1 quarantined file (no info on the other threats). Delete and restore buttons grayed out. And I logged on the machine as a local Administrator.
What does I have to do to recover that file? (it's a false positive, identified as PossibleThreat)
thanks
Bye, Dario
