Everytime I upgrade the manager it deletes my quarantine list. The IPs are there for a reason and I want to blacklist them for good. how can I keep the quarantine list after upgrades so they will be blocked?
I can understand that Quarantining an End Point or Attacker is a temporary remediation and that Blacklisting would be the permenant route...however at the same time...I do not understand how that justifies the upgrade deleting this list.
Was this a major version jump or a Patch?
The quarantine is this way by design. For permanent IP blocking it is recommended to use the firewall feature instead.
I believe engineering are working on changing this in the future, but I do not know when this will be.
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center