FortiEMS quarantined a file with the same checksum as a file in my allowlist

[Magdalena]

My FortiEMS has quarantined a file that has the excact same checksum as a file in my allowlist, its just the name thats different but it still got deleted from the client. But because the checksum is already listed in my allowlist i have no option to unblock the file. Has anyone an idea on why this happens and how i can unblock the file?

[Anthony_E]

Hello ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards

[Anthony_E]

Hi,

Did you have a look at this KB article:

Technical Tip: How to restore the quarantine file blocked by real-time scan

Regards,