Configuring Quarantine settings and restoration of objects from Quarantine

Quarantine is a special local repository on a device with Kaspersky Endpoint Agent installed which is intended for storing files that are probably infected by viruses or cannot be disinfected at the time when they are detected. Quarantined files are stored in an encrypted form and therefore do not compromise your device's security.

By default, the local quarantine is located in the %ALLUSERSPROFILE%\Kaspersky Lab\Endpoint Agent\<application version>\Quarantine folder. By default, the objects restored from quarantine are stored in the %ALLUSERSPROFILE%\Kaspersky Lab\Endpoint Agent\<application version>\Restored folder.

Kaspersky Security Center generates a common list of quarantined objects on devices with Kaspersky Endpoint Agent installed. Network Agents on the devices submit information about quarantined files to the Administration Server.

Kaspersky Security Center does not copy files from Quarantine to Administration Server. All objects are stored on protected devices with Kaspersky Endpoint Agent installed. Objects are also restored from Quarantine on protected devices.

To configure Kaspersky Endpoint Agent Quarantine settings:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, select the Policies folder.
3. Select Kaspersky Endpoint Agent policy and open its properties window in one of the following ways:
   • Double-click the policy name.
   • Select Properties in the policy context menu.
   • Select the Configure policy settings item in the right part of the window.
4. In the Repositories section select the Quarantine subsection.
5. In the Quarantine settings section configure the quarantine settings:
   1. In the Quarantine folder field, enter the path to where you want to create the Quarantine folder on the devices or click Browse and select the path.

      The default path is %SOYUZAPPDATA%\Quarantine\. The Quarantine folder is created on all devices with Kaspersky Endpoint Agent at the following path: %ALLUSERSPROFILE%\Kaspersky Lab\Endpoint Agent\4.0.

      The value of the %ALLUSERSPROFILE% variable depends on the operating system of the device where Kaspersky Endpoint Agent is installed. For example, if Kaspersky Endpoint Agent is installed on drive C, the path to the Quarantine folder is C:\ProgramData\Kaspersky Lab\Endpoint Agent\4.0\Quarantine.

   2. To configure the maximum quarantine size, select the Maximum Quarantine size (MB) check box and type the maximum size of quarantine in MB or select it from the list.

      For example, you can set the maximum Quarantine size to 200 MB.

      When the maximum quarantine size is reached, Kaspersky Endpoint Agent publishes the corresponding event on Kaspersky Security Center server and in the Windows Event Log, but does not stop quarantining new objects.

   3. To specify the quarantine threshold (the space in quarantine remaining until the maximum quarantine size is reached), select the Threshold value for space available (MB) check box.

      For example, you can set the threshold value of Quarantine to 50 MB.

      When the quarantine threshold is reached, Kaspersky Endpoint Agent publishes the corresponding event on Kaspersky Security Center server and in the Windows Event Log, but does not stop quarantining new objects.

6. In the Restoring objects from Quarantine section, in the Target folder for restored objects field, enter the path where you want to create the folder for objects restored from Quarantine.

   The default path is %SOYUZAPPDATA%\Restored\. The Restored folder is created on all devices with Kaspersky Endpoint Agent at the following path: %ALLUSERSPROFILE%\Kaspersky Lab\Endpoint Agent\4.0.

   The value of the %ALLUSERSPROFILE% variable depends on the operating system of the device where Kaspersky Endpoint Agent is installed. For example, if Kaspersky Endpoint Agent is installed on drive C, the path to the folder with the objects restored from quarantine is C:\ProgramData\Kaspersky Lab\Endpoint Agent\4.0\Restored.

7. In the upper right corner of the settings group, change the switch from Unaffected by policy to Under policy.
8. Click Apply button and then click OK.

Settings of Quarantine and restoring objects from Quarantine are configured.

See also Getting started with Kaspersky Endpoint Agent Configuring Kaspersky Endpoint Agent security settings Configuring proxy server connection settings Configuring the usage of Kaspersky Security Network Configuring the integration of Kaspersky Endpoint Agent with Kaspersky Sandbox Configuring Threat Response actions of Kaspersky Endpoint Agent to respond to threats detected by Kaspersky Sandbox Configuring data synchronization with the Administration Server Managing Kaspersky Endpoint Agent tasks

Page top