Technical Tip: How to manually recover files from ...

FortiClient

FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.

Article Id 262285

Description

This article describes how to manually recover files that are quarantined by FortiClient on Linux OS endpoints.

Scope

FortiClient Linux 7.0.

Solution

First of all, confirm that the file wanted to recover is in the default quarantine folder using the below command on a terminal:

sudo ls /opt/forticlient/quarantine

Once the file wanted to be recovered located, use the below command to recover the file to its original location:

sudo /opt/forticlient/fchelper -r /opt/forticlient/quarantine/<filename>

299

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to manually recover files from quarantine in Linux OS endpoints