FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
Article Id 262285
Description This article describes how to manually recover files that are quarantined by FortiClient on Linux OS endpoints.
Scope FortiClient Linux 7.0.

First of all, confirm that the file wanted to recover is in the default quarantine folder using the below command on a terminal:


sudo ls /opt/forticlient/quarantine


Once the file wanted to be recovered located, use the below command to recover the file to its original location:


sudo /opt/forticlient/fchelper -r /opt/forticlient/quarantine/<filename>