[SOLVED] FortiClient - AntiVirus - Quarantine

[RolfW]

Hello there,

we have the FortiClient with FortiClient Enterprise Manager in use. I am new to FortClient and asked me, how can I work with the quarantaine files? In the EWS I couldn't see an option for that and on the client I can't delete the files. Is the a main configuration for that, or I am blind to see?

FortiClient 5.4.2.0860

FortiClient EMS 1.0.1.0077 Thanks.

Regards, Rolf

[Carl_Wallmark · Accepted solution]

Hi Rolf,

There is no way you can manage quarantined files via the EMS, everything has to be done manually on each client.

I have brought this up, and they say central quarantine is on the roadmap for EMS...

[Carl_Wallmark · Accepted solution]

Hi Rolf,

You probably need to go in under File -> Settings, and in the lower part of the screen, you´ll see a padlock, click on it and enter your password (if you have locked the settings with a password), then you can go to quarantine and remove the files.

It´s a very strange way of doing this, I hope they will change it.

[Carl_Wallmark · Accepted solution]

In the EMS you´ll find it under the profile and then System Settings, on the top of the page. "Password Lock Configuration"

After that you do this:

1. Disconnect from EMS (Compliance Tab -> "Click to disconnect"

2. File -> Settings

3. Click on padlock, unlock with password

4. Close Settings

5. Go to quarantine, and the buttons should be clickable again.

[RolfW]

The Disconnect isn't available. When I deregister the Client, then it is avalable. Is this the correct way, or can I set this up?

On the Profile -> System Settings > there is a password defined for "Password Lock Configuration".

[Carl_Wallmark · Accepted solution]

ah, you probably have the "Disable Unregister" checked in your profile, in System Settings, go down to the bottom and you see a checkbox with "Disable Unregister" 

[RolfW]

10 Points to Sweden. That's it, it is active. Sorry and thank you very much!

[Carl_Wallmark]

haha you are welcome! ;)

[RolfW]

Just for EMS USers, with 6.0.x the Quarantine would be handled in the EMS Menü Quarantine Management. :)

Very good, hope there will be more options in the future :) .