Datto AV File Submission

This article covers how to use the Datto AV File Submission feature to submit suspicious files or those you believe should not be flagged by Datto AV.

Datto AV File Submission feature

Often users are unable to use an exclusion when a file or application exists in a non-standard folder or path. To prevent Datto AV from quarantining these files, you can use the Datto AV File Submission feature. When you submit a file using this feature, Datto AV will sandbox the file to confirm if it is a possibly malicious or benign file. Once a determination is made, the files hash will be added to the AV library.

To use the Datto AV File Submission feature:

1. On the top navigation menu, click Policies.
   
2. In the left navigation pane, click Datto AV File Submission.
   
3. Click the Create Submission button.
   
4. The Submit File modal is displayed. In the Description field, enter information that will help you easily identify the file. The description you enter will appear in the Submission ID field in the table.
   
5. For Type, select one of the following: 
   • Suspicious File: Selected by default. This is a file that you believe is a threat and you would like Datto AV to add that file's hash to our malware library. Be sure to zip and password protect the file using the password “infected.”
   • Suspected False Positive: A file that you believe should not be flagged by Datto AV. Typically this will be used by application developers to mark a new agent version as not malware or as a file previously detected.
     
6. Drag the applicable file to the Drag and drop field or click in the field to select the file. If necessary, you can delete the file and select a different one.
   
7. Click the Submit button. The file is listed in the table Status of Pending. The Datto AV security engineers will evaluate the files to confirm the submission type is valid. The file hash will be returned with the disposition, and the Status will convert to Complete. The submission review process may take 24 hours.
   

Frequently Asked Questions