Where is the quarantine with the latest client?

HI Paul , 

The infected files are moved to C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED by default unless the directory is changed..  But if the file is cleaned that would mean that the files is blocked or removed from the system 

Thanks and Regards

Aditya Patel | Network and security engineer.

Thanks, so please can you help me understand:

• Employee receives a legitimate document
• Sophos flags it as a threat
• Sophos "cleans" the document
• Can we get the document back from some kind of quarantine?

"cleaned" doesn't really equal deleted...

So we no longer have the ability to, from the client, click in and clean up the threat they way we used to with the quarantine?

Thanks

So am I understanding correctly?

1) Clean = Delete?

2) If there is a false positive there is no way to recover the file?

3) There is no Quarantine anymore?

Why Sophos people do not give answers?

There is or not a Quarantine manager in Sophos Central Endpoint Client?

any answer, please!!!!

Hi Everyone,

In the Central client, we do not have any quarantine directory to store the files removed by Sophos. However, it is stored in a separate local Database so that in the event of a False the positive the file case be restored. 

You may contact support to restore the False positive files.