Quarantine
March 25, 2022
ID 49310
This section describes how to view quarantined objects, how to configure the processing of quarantined objects, and how to configure quarantine settings.
During mail protection, replication protection, and database scanning, Kaspersky Anti-Virus processes objects in accordance with their assigned status following anti-virus scanning and filtering of attachments. By default, before disinfecting and deleting an object Kaspersky Anti-Virus creates a copy of the object and saves it in the Quarantine database – kavquarantine.nsf.
The Quarantine database is used to store quarantined objects and take actions on them. The Quarantine database is stored on each one of the protected servers as a copy and contains the original objects moved to Quarantine by the Mail protection, Replication protection, or Database scanning tasks. When installing the application, you can choose whether to store Quarantine objects in all replicas or if the Quarantine database will store only objects from its respective server.
By default, objects labeled as infected based on the results of a virus scan are moved to Quarantine before being disinfected or deleted.
It is not possible to place objects in quarantine manually.
The database kavquarantine.nsf is created in the Kaspersky Anti-Virus database directory when the application is installed (the default directory is kavdatabases). Quarantined objects can only be accessed through the Control Center database user interface.
To make viewing and finding information in the Quarantine database more convenient, objects placed in quarantine as a result of scanning email messages, replications and databases are shown in different sections.
The maximum duration of object storage in Quarantine is 30 days. You can change the storage time of objects in the server settings. If the object storage period is limited, when this time elapses the objects whose storage duration exceeds this limit are deleted from the Quarantine database. If necessary, you can delete objects from Quarantine manually.
The total size of quarantined objects is limited to the physical size of the database. The maximum size of the Quarantine database is 64 GB. When this value is reached objects will no longer be placed in quarantine. In this case, we recommend that you manually delete objects already in quarantine, or modify the settings for quarantined objects.
