Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How do I change the amount of time a quarantine is active?

    • Updated:
    • 18 Sep 2017
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint NGFW All
    • TippingPoint SecBlade All
    • TippingPoint SMS All
    • TippingPoint TPS All
    • TippingPoint Virtual SMS
    • TippingPoint Virtual TPS All
    • Platform:
Summary
In order to modify the default Quarantine timeout you will need to access the Threat Suppression Engine (TSE) configuration page.  Accessing the TSE configuration page can be accomplished via the SMS device configuration page or on the IPS/TPS preferences page via the LSM.
Details
Public

From the SMS.

  1. Log in to the SMS from a client.
  2. On the SMS toolbar, navigate to the Devices->All Devices and expand the tab.
  3. Select an X-Family IPS device from the display window and do one of the following:
    • Right-click and select Edit->Device Configuration.
    • On the top menu select Edit->Details->Device Configuration.
    • Double-click the device and click on Device Configuration.
  4. On the Device Configuration Wizard screen, click the TSE Settings tab.
  5. The Device Configuration (TSE Settings) screen displays.
  6. If you want to automatically release IP addresses from quarantine after a specified amount of time, select the "Automatically release addresses from quarantine after specified duration" check box and modify the entry for Quarantine Timeout (Specify the Timeout value in minutes).
  7. Click OK to update the device.

 


From the IPS LSM.

  1. From the LSM menu, click IPS > Preferences.
  2. On the IPS Preferences page look in the Configure Threat Suppression Engine (TSE) section.
  3. If you want to automatically release IP addresses from quarantine after a specified amount of time, select the "Automatically release addresses from quarantine after specified duration" check box and modify the entry for Quarantine Timeout (Specify the Timeout value in minutes).
  4. Click Apply.

From the TPS LSM.

  1. From the LSM menu, click Policy > Settings.
  2. On the Settings page look for the Quarantined Addresses section.
  3. If you want to automatically release IP addresses from quarantine after a specified amount of time, select the "Automatically release addresses from quarantine after specified duration" check box and modify the entry for Quarantine Timeout (Specify the Timeout value in minutes).
  4. Click Apply.

Reference: SMS User Guide
Reference: LSM User Guide

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000090145
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.