This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to automatically say "Yes" to quarantine file and continue with scan

Hello

I been running Sophos for Linux in a script that checks files on a mount drive. The problem I encountering is Sophos scan is waiting for a responds (Yes/No/All) when quarantine a file. One has to type in responds in order to continue with the scan. How do I get Sophos to quarantine a file , and continue with the scan automatically

The command I am using is savscan -f -rec -all -dn -archive --quarantine / I try adding Y or -Y at the end of the command but it doesn't work

Any suggestion much appreciated

This thread was automatically locked due to age.

Parents

0 Jasmin over 4 years ago

Hi Anthony Lenzo

--quarantine changes the permission on the file because of that it'll ask you for the change on each file.

Instead of --quarantine, you can use --move which will move the infected files to quarantine directory and that should not be asking you Yes/No on each file.

Please refer to this document which has all the valid arguments for savscan command.

Regards,

Jasmin
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 Anthony Lenzo over 4 years ago in reply to Jasmin

Hi Jasmin

Thanks for your reply. Couple more questions.

Do I have to create the quarantine directory before run the savscan with the --move option?

Does the option also change the permission of the file just like --quarantine option?
Cancel
Vote Up 0 Vote Down

Cancel
0 Shweta over 4 years ago in reply to Anthony Lenzo

Hi Anthony Lenzo

quarantine is only available for on-demand scans (savscan).You can configure an on-demand scan to put infected files into quarantine to prevent them from being accessed. It does this by changing the ownership and permissions for the files. Please refer to this document which should help you.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Shweta over 4 years ago in reply to Anthony Lenzo

Hi Anthony Lenzo

quarantine is only available for on-demand scans (savscan).You can configure an on-demand scan to put infected files into quarantine to prevent them from being accessed. It does this by changing the ownership and permissions for the files. Please refer to this document which should help you.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Anthony Lenzo over 4 years ago in reply to Shweta

Hi Shweta

Yes i am aware what the --quarantine option does . The issue that I having is (and mention in my original posting) is when during a scan when it finds a file that has a virus it stops and wait for manual interaction to say Yes, No or All in order to continue with the scan. I want it to do is quarantine the file and continue with the scanning the rest of the file system. Basically have a automatic "Yes" to the quarantine the file and continue with the scan.

Although seem like the --move option may be my solution. Just have try it out.
Cancel
Vote Up 0 Vote Down

Cancel