<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Cisco AMP Quarantine Folder filling up C: drive in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/cisco-amp-quarantine-folder-filling-up-c-drive/m-p/4320918#M1079957</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've noticed that Cisco AMP is filling C: drive completely. The 'C:\Program Files\Cisco\AMP\Quarantine' uses 192GB of space.&lt;/P&gt;&lt;P&gt;I've also noticed that this PC is generating a lot of events for the same file being quarantined over and over again. Is this the reason it's filling up the quarantine folder?&lt;/P&gt;&lt;P&gt;Operating System: Windows 10 Enterprise&lt;/P&gt;&lt;P&gt;Connector Version: 7.1.5.11523&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Do you have any other suggestions on what could be causing this behaviour?&lt;/P&gt;&lt;P&gt;Is there something we can do? Is it a known bug in some versions of Cisco AMP?&lt;/P&gt;&lt;P&gt;If the user is certain that there is no file he wants to restore is it then safe to proceed with deleting this quarantine folder?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Kind regards,&lt;/P&gt;</description>
    <pubDate>Fri, 09 Apr 2021 10:39:12 GMT</pubDate>
    <dc:creator>IverAB37121</dc:creator>
    <dc:date>2021-04-09T10:39:12Z</dc:date>
    <item>
      <title>Cisco AMP Quarantine Folder filling up C: drive</title>
      <link>https://community.cisco.com/t5/network-security/cisco-amp-quarantine-folder-filling-up-c-drive/m-p/4320918#M1079957</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've noticed that Cisco AMP is filling C: drive completely. The 'C:\Program Files\Cisco\AMP\Quarantine' uses 192GB of space.&lt;/P&gt;&lt;P&gt;I've also noticed that this PC is generating a lot of events for the same file being quarantined over and over again. Is this the reason it's filling up the quarantine folder?&lt;/P&gt;&lt;P&gt;Operating System: Windows 10 Enterprise&lt;/P&gt;&lt;P&gt;Connector Version: 7.1.5.11523&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Do you have any other suggestions on what could be causing this behaviour?&lt;/P&gt;&lt;P&gt;Is there something we can do? Is it a known bug in some versions of Cisco AMP?&lt;/P&gt;&lt;P&gt;If the user is certain that there is no file he wants to restore is it then safe to proceed with deleting this quarantine folder?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Kind regards,&lt;/P&gt;</description>
      <pubDate>Fri, 09 Apr 2021 10:39:12 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/cisco-amp-quarantine-folder-filling-up-c-drive/m-p/4320918#M1079957</guid>
      <dc:creator>IverAB37121</dc:creator>
      <dc:date>2021-04-09T10:39:12Z</dc:date>
    </item>
  </channel>
</rss>

