Overview
As an Administrator, you can now manage the quarantine process centrally through the EDR Console in EDR. This functionality enhances visibility and control over quarantined files from all connected endpoints.
❗ Note: This feature is not applicable for Control Center (Multisite) environments.
Scope
- Quarantine information is collected from all Endpoints and made available on the EDR Server.
- Applies to all licensed EDR flavours.
- Upload functionality is only supported on On-Prem deployments,
- Upload feature is controlled by a license flag (default: disabled).
Supported Admin Actions
From the EDR Console, administrators can perform the following actions:
Single-Selection Actions
-
Pull from Agent
- Downloads the file from the agent (if online) or via roaming server (if roaming).
- Not applicable if file is already downloaded.
Multi-Selection Actions
-
Restore
- Skips records already marked as Restored or Deleted.
-
Delete
- Skips records already marked as Restored or Deleted.
-
Send to Seqrite Lab
- Skips records with status Restored, Deleted, or Sent to Lab.
Quarantine Record Details Displayed on Server
Each record displays:
- File hash code
- Endpoint details
- File name
- Location
- Quarantined on
- Virus name
- Source
- Action status
Action Status Values
| Status | Description |
|---|---|
| Quarantined | Default status |
| Deleted | File removed |
| Restored | File restored |
| Delete in Progress | Deletion is ongoing |
| Restore in Progress | Restoration is ongoing |
| Send to Lab in Progress | Lab submission initiated |
| Sent to Lab | File submitted to Seqrite lab |
| Upload in Progress | File is being uploaded |
| Download File | File available for download (after upload) |
| Pull Request In Progress | Pull request ongoing |
| Pull Request Failed | Unsuccessful Pull Request |
| Delete Failed | Could not delete the selected |
| Restore Failed | Failed selected restore request |
| Send Failed | Failed the send request |
Download Workflow
- Admin submits Upload request with a password for file protection.
- After successful upload, Download File option becomes available.
- File is password-protected during download.
Note The upload file size limit is restricted to 10 mb.
Agent & Console Sync
- Actions performed on Agent UI are reflected on Server Console.
- Vice versa synchronization is ensured.
Report Management
-
Quarantine data retained for:
- 60 days (status: Restored or Deleted)
- 90 days (all other statuses, considering client retention max config)
- Export Options: CSV / PDF
- Scheduled Report Support: Available via Admin settings.
- Filters & Copy Functionality: Supported for hash codes.
Note: Restored and Deleted reports will be deleted after 60 days
Role-Based Access
| Role | Permissions |
|---|---|
| Super Admin / Admin | Full access to all actions and reports |
| Group Admin | Can act on files belonging to their group and child groups |
| Report Viewer | View-only access, no actions allowed |