Quarantine

The register

Settings, Security, Quarantine lists every file that is not simply clean, newest first: held back, failing its scan, still being checked, released or destroyed, whether it came in as an attachment or a matter document. Each row shows the file, what it belongs to, who uploaded it, when and its standing. Search by file name, and narrow by standing, kind of file, uploader or day.

A held file

Open a row to see the file, the record it belongs to, who uploaded it, what the scanner matched, how many scans were tried and when it looks again. Its actions sit in one menu:

• Release as a false positive: the file becomes available. Give the reason. The person who uploaded it may not release it.
• Scan again: runs the scanner again. The file stays held until it is clean.
• Destroy: deletes the file's contents. The record stays, with who destroyed it and why.

Release and destroy ask for your second step, and both are kept on the audit trail.

Who is told

When a file is held back, the person who uploaded it and every security administrator are told at once. When a file has failed its scan for a day, the security administrators are told too.

The scanner itself

Settings, System health shows the virus scanner: whether it answers, its version and the date of its virus definitions. It reads degraded, and an alert is raised, when the definitions are older than the firm's limit, one day unless set under Settings, General, Security.