Endpoint Discover: Quarantine File response rule "Leave marker file" is grayed out.


Article ID: 159487


Updated On:


Data Loss Prevention Endpoint Prevent


You are trying to create a Endpoint Discover Quarantine File response rule to leave a marker file in place of remediated files. 

However the checkbox next to "Leave marker file in place of remediated file"  is shaded out.


The ability to Quarantine File on the Endpoint is part of the Endpoint Prevent license.

Make sure you have both Endpoint Discover and Endpoint Prevent license via System / Settings.


Note - there appears to be a defect in some 11.5 licenses, for which the presence of the Endpoint Discover & Prevent license files are not enough.

If this is the case, the addition of the Network Protect license file will allow marker file configuration. For more info, please see eTrack 2782223.