Quarantine
Quarantine allows the Administrator to set the Risk State for all hosts to Safe. In the event that a scan profile generates significant false negatives which results in multiple hosts being set to At Risk, rather than set each individual host to Safe, this option allows the Administrator to globally change all hosts. Once that has been done, then the scan can be reconfigured and hosts rescanned.
Quarantine VLAN switching can be globally enabled or disabled from the Quarantine view.
- Click System > Settings > Control > Quarantine.
- Mark the Enable Quarantine VLAN Switching check box with a check mark to enable it.
- If you need to set all hosts to safe, click Apply.
- Click Save Settings.
Settings
|
Option |
Definition |
|
Quarantine VLAN |
When quarantine VLAN Switching is set to Enable and the ports are in the Forced Remediation Group, the appliance switches unregistered hosts that are being scanned to the quarantine VLAN until the scan process is completed. Registered hosts are scanned in the production VLAN. Once the scan is finished and the registered host has passed, the host remains in the production VLAN. If the host fails the scan, it is moved to the quarantine VLAN to remediate. When set to Disable, all hosts remain in the production VLAN during the scan process even if the host fails the scan. Default =Enable |
|
Set all hosts 'Risk State' to 'Safe' |
'Risk State' to 'Safe' Changes all hosts to Safe. Note: The status of the individual scans for each host remain unchanged. |