Skip to main content

How can we help you?

Druva Documentation

Quarantine Bay

Overview

The risk of a cybersecurity failure is no longer limited to the reputation of a company, or something to be borne by its customers, but is an existential risk to the company itself. Ransomware extorts the business with the one universal thing all businesses value – their own data. Needless to say, you need to be well prepared for this danger.

In case of an infection, to quarantine is to isolate the infected parts in order to contain the infection and not allow it to spread. To this effect, Ransomware Recovery enables you to quarantine infected snapshots on the impacted resources, which helps safeguard your system from further infection by barring users or administrators from downloading or restoring data to other resources.

Know your Quarantine Bay Dashboard

Overview

This page displays the information about the quarantined resources - endpoints, servers (File Servers and NAS Share), and Virtual Machines (VMware).

Access path 

Click the G_Bar1.jpg icon to access the Global Navigation Panel and select Cyber Resilience > Ransomware Recovery > Quarantine BayThe  Quarantine Bay page is displayed.

Q_bay_listing_March21.png

The following table lists the details on the Quarantine Bay dashboard page.

Field Description
Last Updated The date and time when the details of the page were last updated. 
Summary tab 
Endpoints The total number of quarantined endpoints devices. Click on the count to view details of each. 
File Backup Sets (Servers - File Server/NAS devices) The total number of quarantined servers (File Server/NAS devices). Click on the count to view details of each.
Virtualized Machines The total number of quarantined virtual machines (VMware). Click on the count to view details of each.
Quarantine Ranges tab 
Resource Name The name of the quarantined resource.
Resource Type The type of the data source - Endpoints, File Server, NAS, and VMware.
Quarantine Range

The defined time range for a resource to remain in a quarantine state. 

Note: If the end date is not defined, only the details of the Start time (Onwards) are displayed.

Resource Status

The status of the resource. The following statuses are displayed:

  • None: The resource has not been recovered.
  • Date and Timestamp (UTC): The latest date and time when the resource was restored.

Action

Button  Description
Edit Range Allows you to update the quarantine range (Start and End Time) for your resources.
Create Curated Snapshot

Allows you to create Curated Snapshot for a resource.

 Currently, Curated Snapshot is supported only for Endpoints and Servers (File Server and NAS devices).

Remove from Quarantine Bay Allows you to remove a resource from the Quarantine state.

Filter for Quarantine Range tab

Qbay_filters.png

Use the filter to narrow down the search and listing of quarantined resources - endpoints, servers, and virtual machines.

Field  Description
Impacted Date Range

The start and end date when the resource got impacted by the Ransomware attack.

Resource Type

The type of the data source - Endpoints, File Server, NAS, and VMware.

Action

Button  Description
Apply Applies the filter and displays results based on filters applied.
Reset To cancel the filters applied.

You also have an option to search using Resource Name