Check Point HARMONY R81 Administration Manual page 320

The Anti-Ransomware Restoration windows open.
4. Click Restore to start the restoration process.
If you see a note that the files were already restored, click Cancel. It is not necessary to
restore the files again.
5. In the Restore Step 1 of 2 window:
a. Select the location to place the restored files:
n Restore files to the original location (default)
n Restore to selected location - If you select this, you are prompted to select
the location.
b. Delete files created by the attack, including encrypted files - This is selected by
default. Clear it if you do not want to delete the files.
c. Click Next.
6. In the Restore Step 2 of 2 window, click Restore to start the process.
The Endpoint Security Restoration window opens and shows the files that were restored
and where they are located.
7. Click Close.
Anti-Ransomware Backup Settings
R81 Harmony Endpoint Server Administration Guide | 320