Centralized Quarantine Management (CQM)

Overview

As an Administrator, you can now manage the quarantine process centrally through the EPS Console in EPP On-Premise v8.4. This functionality enhances visibility and control over quarantined files from all connected endpoints.

Note: This feature is not applicable for Control Center (Multisite) environments.

Scope

  • Quarantine information is collected from all Endpoints and made available on the EPS Server.
  • Applies to all licensed EPP flavours.
  • Upload functionality is only supported on On-Prem deployments, not on Cloud.
  • Upload feature is controlled by a license flag (default: disabled).

Supported Admin Actions

From the EPS Console, administrators can perform the following actions:

Single-Selection Actions

  • Pull from Agent

    • Downloads the file from the agent (if online) or via roaming server (if roaming).
    • Not applicable if file is already downloaded.
  • Restore All / Delete All

    • Restores or deletes all matching records across endpoints.
    • Requires at least one row selection.
    • Confirmation alert includes number of records and a help link.

Multi-Selection Actions

  • Restore

    • Skips records already marked as Restored or Deleted.
  • Delete

    • Skips records already marked as Restored or Deleted.
  • Send to Seqrite Lab

    • Skips records with status Restored, Deleted, or Sent to Lab.

Quarantine Record Details Displayed on Server

Each record displays:

  • File hash code
  • Endpoint details
  • File name
  • Location
  • Quarantined on
  • Virus name
  • Source
  • Action status

Action Status Values

Status Description
Quarantined Default status
Deleted File removed
Restored File restored
Delete in Progress Deletion is ongoing
Restore in Progress Restoration is ongoing
Send to Lab in Progress Lab submission initiated
Sent to Lab File submitted to Seqrite lab
Upload in Progress File is being uploaded
Download File File available for download (after upload)
Pull Request In Progress Pull request ongoing
Pull Request Failed Unsuccessful Pull Request
Delete Failed Could not delete the selected
Restore Failed Failed selected restore request
Send Failed Failed the send request

Download Workflow

  1. Admin submits Upload request with a password for file protection.
  2. After successful upload, Download File option becomes available.
  3. File is password-protected during download.
  4. Note The upload file size limit is restricted to 10 mb.


Agent & Console Sync

  • Actions performed on Agent UI are reflected on Server Console.
  • Vice versa synchronization is ensured.

Report Management

  • Quarantine data retained for:

    • 60 days (status: Restored or Deleted)
    • 90 days (all other statuses, considering client retention max config)
  • Export Options: CSV / PDF
  • Scheduled Report Support: Available via Admin settings.
  • Filters & Copy Functionality: Supported for hash codes.

    Note: Restored and Deleted reports will be deleted after 60 days


Role-Based Access

Role Permissions
Super Admin / Admin Full access to all actions and reports
Group Admin Can act on files belonging to their group and child groups
Report Viewer View-only access, no actions allowed

Upgrade Support

During a Client Major Upgrade:

  • Agent backs up the Quarantine DB and restores it after upgrade.
Was this page helpful?