File Analysis Quarantine Question

[sdonovan123]

hello,

We just moved to using the AMP and had a question regarding the quarantine.  Currently when files are being checked they are placed into the File Analysis quarantine for 30 minutes then released.  Is this with best practice or how should I have it set up?

Thanks!

Shawn

[Libin Varghese · Accepted solution]

Shawn,

The default configuration of 60 mins is certainly recommended practice, however can be customized as per requirement.

The file analysis quarantine is dynamic and acts as a temporary holding space while the file is analyzed on the cloud.

If the response from the cloud server deems the file safe, the file would be release immediately without completing the 30/60 minute retention time.

Thanks

Libin Varghese

[sdonovan123]

One last question.  Should the default action after 60 minutes to be delete or release?

Thanks!

Shawn

[Libin Varghese · Accepted solution]

The default action is release.

This is so that no legitimate emails are lost and if an email was unable to obtain a verdict even after 60 minutes it is allowed through.

- Libin V