Solutions in this chapter:

• Introducing Central Quarantine 2.01

• Implementing Quarantine Console 2.01

• Implementing Quarantine Server 2.01

• Configuring Central Quarantine 2.01

• Troubleshooting Central Quarantine 2.01

• Summary

• Solutions Fast Track

• Frequently Asked Questions

Introduction

When a client on your network encounters an infected file that cannot be repaired, it typically isolates the infected file in a local Quarantine directory to prevent the virus from spreading to other file system areas of the infected machine. Symantec Central Quarantine provides the option to further remove these files from harm s way by forwarding a copy of each infected client file to a single network location for the administrator to investigate and take any additional actions. This central repository for infected files consists of two parts:

• The Quarantine Server

• The Quarantine Console

In this chapter we will begin with a description of the features and architecture of Symantec Central Quarantine, and instructions on how to install the two main components of the Quarantine service. Once the Server and Console have been installed on your network, you need to configure the central repository to receive infected files from your Norton Antivirus Corporate Edition (NAVCE) clients. Central Quarantine can monitor your network using the TCP or SPX protocol(s), listening to a pre-established port number that you ll set your clients to transmit information on. Once Central Quarantine receives a user-submitted file, it stores the submission in a directory on the Quarantine Server component until the file can be transmitted to Symantec Security Response (SSR), a team of Symantec s virus...