Fortinet black logo

Handbook

Viewing the quarantine monitor

Viewing the quarantine monitor

To view the files that have been quarantined according to the policies you set in Network Security > Anti-Virus, go to FortiView > Security > Data Analytics > Quarantine Monitor.

Quarantined file
File Name

The name of the quarantined file. Format: Checksum+Protocol.

Checksum

The checksum of the file.

Size

The size of the quarantined file.

First Timestamp

The time at which the file was first recorded.

Last Timestamp

The time at which the file was caught.

Service

The protocol of the quarantine file, HTTP, HTTPS, or SMTP.

Status

Infected—the file is infected. Note: no other statuses.

Duplicate Count

How many times the virus was scanned out between the first timestamp and the last timestamp.

Time to Live

Lifetime of the virus in quarantine.

  • 0-336 hours—How many hours the virus has left to live.
  • Expired—The virus is expired. Note: seldom will you see this, as the expired virus will be removed from the quarantine monitor, since it is no longer relevant.
  • Forever—The virus will never expire. A copy of the virus is kept here to give notice to the user. Note: The virus is no longer a threat since it is blocked.
Description

The virus type.

Viewing the quarantine monitor

Viewing the quarantine monitor

To view the files that have been quarantined according to the policies you set in Network Security > Anti-Virus, go to FortiView > Security > Data Analytics > Quarantine Monitor.

Quarantined file
File Name

The name of the quarantined file. Format: Checksum+Protocol.

Checksum

The checksum of the file.

Size

The size of the quarantined file.

First Timestamp

The time at which the file was first recorded.

Last Timestamp

The time at which the file was caught.

Service

The protocol of the quarantine file, HTTP, HTTPS, or SMTP.

Status

Infected—the file is infected. Note: no other statuses.

Duplicate Count

How many times the virus was scanned out between the first timestamp and the last timestamp.

Time to Live

Lifetime of the virus in quarantine.

  • 0-336 hours—How many hours the virus has left to live.
  • Expired—The virus is expired. Note: seldom will you see this, as the expired virus will be removed from the quarantine monitor, since it is no longer relevant.
  • Forever—The virus will never expire. A copy of the virus is kept here to give notice to the user. Note: The virus is no longer a threat since it is blocked.
Description

The virus type.