How can a user know if a file is quarantined by AMP?

[Gabe16]

If a file is quarantined by AMP for endpoints, is the end user that had the file supposed to be notified?

We had this happen and there was no warning for the end user.

Is there a setting to turn this on or is there not supposed to be a warning?

[Ken Stieers]

You can change what gets sent to the user via Mail Policy/Incoming Mail Policy, and clicking on the settings under Advanced Malware Protection:

From there you'll see option on what to do with mail that's been quarantined or has malware.

[Josh M]

Whether or not the end user is supposed to be notified should be dictated by your org's internal policies.

This setting can be found within the AMP console's policy settings. 

• Select Management -> Policies
• Select the policy you'd like to edit
• Select Advanced Settings -> Client User Interface
• The setting you're looking for is Engine Notifications

You can find more details in the AMP docs here. Chapter 5, page 60 under Client User Interface heading.