You need to configure Symantec Endpoint Protection (SEP) clients to forward infected files to a Quarantine Server.
Note: A Quarantine Server is an optional component for your network infrastructure. In most cases, features built into SEP and the Symantec Endpoint Protection Manager (SEPM) can properly handle quarantined files.
A Quarantine Server is unable to update definitions on SEP clients. When used with SEP clients, the Quarantine server functions more as a static repository of detected threats. That is all it can do.
We do not recommend that you use the Quarantine Server if you have less than 10,000 clients in your environment.
To enable submission of quarantined items to a Quarantine Server:
In SEPM, click the client group's policy tab.
Open the AntiVirus and AntiSpyware Policy page
Under "Quarantined Items", check Allow client computers to automatically submit quarantined items to a Quarantine Server.