3 Replies Latest reply on Mar 16, 2010 1:13 PM by Mal09

    (Req) Submit from Quarantine

      I hope in next version or McAfee's update, there is submit samples from Quarantine feature in McAfee VirusScan Enterprise.

        • 1. Re: (Req) Submit from Quarantine

          There are two things missing from Quarantine:

           

          - The submit function (as you've mentioned).

           

          and

           

          - The ability for a EPO admin to "recall" a file from any computer's Quarantine.This would help with dealing with false positives and heuristic detections.

          • 2. Re: (Req) Submit from Quarantine
            akl71

            Mal09 schrieb:

             

            - The ability for a EPO admin to "recall" a file from any computer's Quarantine.This would help with dealing with false positives and heuristic detections.


            You can create a "Restore from Quarantine"-Task in ePO, works well (we restored some false positives with it).

            • 3. Re: (Req) Submit from Quarantine

              That's not really what I'm after. From EPO you should be able to select a detection and "aitomatically" have the file retrieved back to a secure location on the EPO server. From there you can analyse the file / submit to McAfee etc etc etc.