Skip to main content
RolfW
New Member
March 21, 2017
Solved

[SOLVED] FortiClient - AntiVirus - Quarantine

  • March 21, 2017
  • 14 replies
  • 32899 views

Hello there,

 

we have the FortiClient with FortiClient Enterprise Manager in use. I am new to FortClient and asked me, how can I work with the quarantaine files? In the EWS I couldn't see an option for that and on the client I can't delete the files. Is the a main configuration for that, or I am blind to see?

 

FortiClient 5.4.2.0860

FortiClient EMS 1.0.1.0077 Thanks.

 

Regards, Rolf

    Best answer by Carl_Wallmark

    ah, you probably have the "Disable Unregister" checked in your profile, in System Settings, go down to the bottom and you see a checkbox with "Disable Unregister" 

    14 replies

    Maciej
    New Member
    March 21, 2017

    Hi Rolf,

     

    what do option do you have in AV Protection tab in your profile on EMS  ? ( " Scan files as they are downloaded or copied to my system" - this option)  

    RolfW
    RolfWAuthor
    New Member
    March 21, 2017

    Hello Maciej,

     

    we (the College before) have "Deny access to infected files" set.

     

    Regards, Rolf

    Maciej
    New Member
    March 21, 2017

    I think I have bad news for you. I have EMS 1.0.4 and ForiClient 5.4.3, and I checked all options there and none of it allowe user to delete or restore file. 

     

    I think that after you lock settings with EMS there is no option to do anything but submite to analyze. This options work only on clients that are not managed by EMS. Also you have to lunch FortiClient console on admin permission.

     

    Maybe there is an option to elevate permission on FortiClient under EMS controlle but I don't see it. 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.