Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sec-ref
Explorer
Jump to solution

Extract files from quarantine

Hi,

 

is it possible to extract the file sent to the quarantine on the device in which the "Smart Endpoint" console is running? The version is 80.30.

 

-Is it correct to use that console?

-What are the technical steps to do it?

-Is it required a specific profile for the user in terms of privilege?

 

The objective is to get the file in order to analyze it with external products.

 

Thanks,

R. R.

0 Kudos
1 Solution

Accepted Solutions
Sec-ref
Explorer

Hi,

from that document it seems that the action is going to restore the file on the server in which it was, and not on the server in which the Checkpoint console is running. Probably the only solution is to define a central location on which copy all quarantined files, as shown on the image of this thread:

Accessing Quarantined Files - Check Point CheckMates

 

Regards,

R. R.

View solution in original post

0 Kudos
2 Replies
PhoneBoy
Admin
Admin
0 Kudos
Sec-ref
Explorer

Hi,

from that document it seems that the action is going to restore the file on the server in which it was, and not on the server in which the Checkpoint console is running. Probably the only solution is to define a central location on which copy all quarantined files, as shown on the image of this thread:

Accessing Quarantined Files - Check Point CheckMates

 

Regards,

R. R.

0 Kudos