Skip to content

Using quarantine to secure sensitive data

How to manage data security with the Quarantine featurelink

In order to help you manage your sensitive data from being released the Ascema system has a facility to quarantine files which contain such data.

Place a file in quarantinelink

A decision to quarantine a file will follow on from sensitive data having been found by a Search or Real-Time Protection task. A particular file of concern may be identified by review of either the Search Report or the Real-Time Protection Report.

Info

In order to quarantine a file the Endpoint agent must have a connection to the Manager. If there is no current connection the option to Quarantine a file will not be available.

  • Having reviewed the relevant report select a file containing sensitive data which should be put in quarantine
  • Right-click the selected file to open the options menu
  • Select the option to Quarantine this file
  • The file will be put in Quarantine and the status of the file will change to reflect this.
  • The user will be alerted that a file has been place in Quarantine
  • The file will no longer be available on the endpoint
  • The options menu for this file will now show new options for the quarantined item

Delete a quarantined filelink

After a file has been placed in quarantine if a review of the data concludes that it should be deleted from that endpoint the Ascema system can be used to complete this task.

  • Select the option to Delete this file
  • The file will be deleted from the endpoint
  • The file will have its status set to resolved.

Release a quarantined filelink

After a file has been placed in quarantine if a review of the data concludes that it may be held on the endpoint then it may be released from quarantine using the Ascema system.

  • Select the option to Revert this file
  • The file will be reinstated into its orinal position on the endpoint
  • The endpoint user will be alerted that their file has been reverted from quarantine
  • The file will have its status set to resolved.