Quarantine, Viewing quarantined files, Tine files, see – Fortinet FortiAnalyzer 3.0 MR7 User Manual
Page 139: Viewing
Quarantine
Viewing quarantined files
FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908
131
Quarantine
FortiAnalyzer units can act as a central repository for files that are suspicious or
known to be infected by a virus, and have therefore been quarantined by your
FortiGate units. This section describes how to view quarantined files.
If a secure connection has been established with the device, the communication
between the two units is the same IPSec tunnel that the FortiGate unit uses when
sending log files.
For more information about configuring the FortiGate unit to send quarantined
files to the FortiAnalyze
.
This section includes the following topics:
•
Viewing quarantined files
The quarantine repository displays a list of files quarantined by FortiGate units to
the FortiAnalyzer hard disk.
To view quarantined files, go to Quarantine > Repository.
Figure 1: Viewing quarantined files
Note: Sending quarantine files to a FortiAnalyzer unit is available only on FortiGate units
running FortiOS 3.0 or later.
FortiAnalyzer units do not accept quarantine files from devices that are not registered within
the FortiAnalyzer unit’s device list. For more information about adding devices, see
“Manually adding a device” on page 80
.
Show
Select a device from the list of available devices to display the list
of quarantined files for a specific device.
Timeframe
Select a span of time when quarantined files were sent to the
FortiAnalyzer unit and select Go.
Automatically
Refresh
Select how often the quarantine page automatically updates.
Select Refresh to update the status page immediately.
Delete
Select a file from the list by selecting the check box next to the
name and select Delete to remove the quarantined file from the
FortiAnalyzer hard disk.
Page n of n
Select a page number x from the list of pages y and press Enter to
see the page.
View n per page
Select the number of quarantined files to view on a single page.
From Device
The name of the device where the quarantined file originated.
File Name
The processed file name of the quarantined file.