FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
kjiye
Staff
Staff
Article Id 298324
Description This article explains the 'deleted' status of scanned files.
Scope FortiClient EMS.
Solution

Picture1.png

 

  • Quarantined: After FortiClient quarantines a file on an endpoint and sends the quarantined file information to FortiClient EMS, users cannot access the file.
  • Quarantined & Allowlisted: When a quarantined file is whitelisted and restored, the file is released from quarantine and becomes accessible on the endpoint.
  • Deleted: Deleted from the user's computer and users cannot access the file
  • Deleted & allowlisted: The file is currently deleted from the user's computer but will become accessible on the endpoint the next time the same file is downloaded.