cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
868
Views
1
Helpful
1
Replies

Recover file that has been quarantined - failing

ryan14
Level 1
Level 1

Is there a way to recover a file that was quarantined by AMP?

When I try to retrieve the file I get an automated email, [Cisco Secure Endpoint] File upload failed with no further details.

I do see a file in C:\Program Files\Cisco\AMP\Quarantine with about the same size as the original but in a different format.

1 Reply 1

Matthew Franks
Cisco Employee
Cisco Employee

Ryan14,

If you open a TAC case and provide the .qrt file, they can recover the file for you.

Thanks,

-Matt