You can place copies of objects that you want to scan into special Backup.
Backup is located on the Central Node server.
If you are using the distributed solution and multitenancy mode, Backup is located on PCN and SCN servers. The web-interface of the PCN server displays information about Backup of all connected SCNs for organizations, which the user is allowed to access.
Users with the Senior security officer role can place copies of objects into Backup using the Get file task or by manually uploading the object to Backup on the PCN or SCN server which is used to manage organizations that the user is allowed to access.
Users with the Security officer role can only work with files received as part of tasks that the same user created on the PCN or SCN server which is used to manage organizations that the user is allowed to access.
If you consider an object to be dangerous, you can place it in Quarantine.
Quarantine is a special area of Backup intended for storing files that could potentially cause harm to computers or to the corporate LAN. You can move files from a host to Quarantine so that they can be scanned before they are deleted, or recovered if no threat is present.
When an object is sent to Quarantine, it is moved but not copied: the object is deleted from the host and is saved in Quarantine.
You can manage objects in Backup as follows: delete, download, upload, and send objects to be scanned, and filter lists of objects.
Kaspersky Anti Targeted Attack Platform displays the objects in Backup as a table of objects.
The default maximum size of Backup (in addition to Quarantine) is 10 GB. As soon as this threshold value is exceeded, the program starts to remove the oldest copies of objects from Backup. When the amount of occupied space is again below the threshold value, the program stops removing copies of objects from Backup. Information on Backup space usage is displayed in the Storage section, Capacity tab.
The maximum size of Quarantine is 10 GB. If the size of Quarantine exceeds the threshold value defined by default, you will not be able to place any new objects into it until you delete some of the old objects. Information about Quarantine space usage is displayed in the Storage section, Capacity subsection in the upper part of the program web interface window.
The maximum size of a file that can be placed in Quarantine is 100 MB.
The actual file size may be greater than the file apparent size due to metadata required to restore the file from Quarantine. When placed in Quarantine, the file actual size is considered. Encrypted files may be sent in decrypted form (depending on encryption settings), compressed files are sent as-is.