Everytime I upgrade the manager it deletes my quarantine list. The IPs are there for a reason and I want to blacklist them for good. how can I keep the quarantine list after upgrades so they will be blocked?
I can understand that Quarantining an End Point or Attacker is a temporary remediation and that Blacklisting would be the permenant route...however at the same time...I do not understand how that justifies the upgrade deleting this list.
Was this a major version jump or a Patch?
The quarantine is this way by design. For permanent IP blocking it is recommended to use the firewall feature instead.
I believe engineering are working on changing this in the future, but I do not know when this will be.