The malware policy has configuration settings to archive downloaded files based on various characteristics. These downloaded files are archived on the Manager server as encrypted files. You can configure the location and maximum disk space that can be used to store the archives. The configuration for disk usage is defined at the Global Manager level. The Manager also provides configuration to prune files that are stored for more than a specified period of time.
Perform the following steps to maintain the malware files saved to the Manager.
Steps:
Select Manager → <Admin Domain Name> → Maintenance → Malware Archive.
The Storage Settings are displayed for each file type. Click the Maximum Disk Space Usage Allowed to modify it as per your requirement.
File storage settings.jpg "Malware_archives-11_1M8.jpg")
To prune the file storage, click Automatic file pruning options.
File pruning option allows you to determine the interval at which the Manager prunes older data to make sure its file system and database have adequate space for new data.
Click Save.
The Manager warns you when the allocated disk space to a malware file type reaches 70%, 80%, 90%, and 100% of the maximum allowed. When the maximum space limit is reached, new malware files of that type are not stored until space is freed.
The default location of these files in the Manager server is
%programfiles%\Trellix\IPS Manager\App\temp\tftpin\malware. The list of files currently archived on the Manager are displayed with the following details.Time— Indicates the date and time when the file was saved
Hash — Displays the MD5 hash of the file
Type — The type of the saved file
Size — The size of the file saved
Details on stored files.jpg "files_saved_to_Manager-11_1M8.jpg")
To delete the archived files, select the required ones and click
.png)