Use the file quarantine feature
Sever Guard can quarantine malicious files. Quarantined files are listed in the quarantine box on the Intrusions page. The system automatically deletes a quarantined file 30 days after the file is quarantined. You can restore aquarantined file with a few clicks before the file is deleted. This topic describes how to view and restorequarantined files.
Operation Steps
In the product management page, choose "Server Guard".

In the left-side navigation pane, click " Intrusion Prevention "> " Intrusions".

In the upper-right corner of the Intrusions page, click Quarantine.

In the Quarantine panel, you can perform the following operations:
- View information about quarantined files. The information includes server IP addresses, paths that store the files, file status, and modification time.
- Click Restore in the Actions column to remove a file from the quarantine box. The restored file appears in the alert list again.