Configure Endpoint Protection clients to forward infected files to a Quarantine Server

Products

• Endpoint Protection

Issue/Introduction

You need to configure Symantec Endpoint Protection (SEP) clients to forward infected files to a Quarantine Server.

Resolution

Note: A Quarantine Server is an optional component for your network infrastructure. In most cases, features built into SEP and the Symantec Endpoint Protection Manager (SEPM) can properly handle quarantined files.

A Quarantine Server is unable to update definitions on SEP clients. When used with SEP clients, the Quarantine server functions more as a static repository of detected threats. That is all it can do.

We do not recommend that you use the Quarantine Server if you have less than 10,000 clients in your environment.

---

To enable submission of quarantined items to a Quarantine Server:

1. In SEPM, click the client group's policy tab.
2. Open the AntiVirus and AntiSpyware Policy page
3. Click Submissions.
4. Under "Quarantined Items", check Allow client computers to automatically submit quarantined items to a Quarantine Server.
5. Type the name of the Quarantine Server.
6. Type the port number to use, and then select the number of seconds to retry connecting.
   Note: The port number used here is different than the port number configured as the listening port in the Central Quarantine Console for the server. To determine the correct port number, please refer to Quarantine Server appears to be using a different port than it is configured to use.
7. Click OK.

Examples:





For information on installing and configuring the Central Quarantine Server, please see Setting up Symantec Central Quarantine for Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x 

Additional Notes:

• The Central Quarantine Server included with Symantec Endpoint Protection is identical to the Central Quarantine Server included with Symantec AntiVirus 10.x and Symantec Client Security 3.x.
• Upgrading the version of SEP in use does not automatically upgrade the version of Quarantine Server. New releases of Quarantine server must be installed or upgraded individually.