Configure the file types that need to be uploaded to Intelligent Sandbox for execution and analysis.
Verify that Intelligent Sandbox is enabled and configured correctly in ePO - On-prem on the Policy Catalog page through health checks.
If you select multiple file types, the portable executable (PE) files are prioritized and sent first to Intelligent Sandbox.
In ePO - On-prem, select Policy Catalog → Threat Intelligence Exchange.
Click TIE Settings, then edit My Default Policy Settings.
Select Sandboxing. In Intelligent Sandbox, enable the service and configure the server list, the connection settings and the file types available on the list.
Click Save when you are finished.
TIE server submits the file types selected to Intelligent Sandbox for further analysis.