Skip to main content

Automatic Quarantine Release

With this feature, you may configure quarantined components to be released when components no longer have failing violations. Auto-release will monitor components quarantined in the last 14 days. When new information resolves the policy violation that caused the quarantine, the component is automatically released from quarantine.

After 14 days, the component may still be released manually. However, the value of releasing that component drops dramatically, since a different component may be in place, or the component is no longer required.

Auto-Release Dashboard

The Auto-Release Dashboard displays an activity summary and components that have been auto-released from quarantine.

This view is accessed from the Firewall Dashboard.

Auto-Released (Month to Date)

Components auto-released from quarantine in the current month

Auto-Released (Year to Date)

Components auto-released from quarantine in the current year

Auto-Release from Quarantine Status

Summary and configuration of policy condition types enabled for auto release from quarantine.

Component View

These are the components that were auto-released from quarantine. Selecting a row will open the Component Information Panel for that component.

These results do not include components that have been manually released from quarantine.

  • Component - The component quarantined in a repository

  • Quarantine Date - The date the component was quarantined

  • Repository - Repository the component belongs to

  • Date Cleared - The date the component was automatically released from quarantine

Auto Release from Quarantine Configuration

The configuration for auto-releasing quarantined components is found on the Auto Release from Quarantine dashboard.

Modifying the auto-release functionality requires the Edit IQ Elements permission set at the Repository Managers access level.

Firewall Dashboard auto-release configuration view

Auto-Release Task

The auto-release task runs hourly by default. The schedule interval can be configured using the following property of Configuration REST API.


The Re-Evaluate Repository option in the Repository Results screen will trigger the auto-release task to review quarantined components.

Policy Condition Types Supporting Auto Release

Policy violations are triggered by conditions in the policy. The condition types are used to correlate to component information.

The policy condition types that can be enabled for monitoring with auto-release from quarantine are:

  • Integrity Rating

  • License

  • License Threat Group

  • Match State

  • Security Vulnerability Severity

  • Security Vulnerability Category

  • Security Vulnerability Custom Remediation

  • Security Vulnerability Custom CVSS

  • Security Research Type

Learn more about policy types from the policy documentation.