Forefront Security for Exchange Server Best Practices - Quarantine files


Applies to: Forefront Security for Exchange Server

The Quarantine feature provides an added level of security because you can retrieve a message that has been incorrectly tagged as a virus. However, there is overhead involved in quarantining files, particularly if many viruses are captured each day. Large organizations can block millions of viruses in a month. Many of these, however, might be Worm viruses that are never quarantined, as all worms are purged. Ideally, you want to quarantine detected viruses, but you might determine that the better course is to simply delete them, even at the risk of losing valid e-mail message content. Not quarantining or sending notifications can greatly simplify your virus management, but it contains the risk of losing e-mail communications that users might want to receive.