Extract files from quarantine

[Sec-ref]

Hi,

is it possible to extract the file sent to the quarantine on the device in which the "Smart Endpoint" console is running? The version is 80.30.

-Is it correct to use that console?

-What are the technical steps to do it?

-Is it required a specific profile for the user in terms of privilege?

The objective is to get the file in order to analyze it with external products.

Thanks,

R. R.

[PhoneBoy]

Did you try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Sec-ref · Accepted solution]

Hi,

from that document it seems that the action is going to restore the file on the server in which it was, and not on the server in which the Checkpoint console is running. Probably the only solution is to define a central location on which copy all quarantined files, as shown on the image of this thread:

Accessing Quarantined Files - Check Point CheckMates

Regards,

R. R.