connects to different proxy servers for Internet connectivity. Based on the source of the traffic, Intelligent Sandbox determines the proxy server on which the Internet access requests from the traffic have to be routed.
These proxy servers can be configured on Intelligent Sandbox to handle Internet access requests:
GTI HTTP Proxy — This setting is relevant for those analyzer profiles which have GTI Reputation enabled in their Analyzing Options. Intelligent Sandbox sends a query to a Trellix GTI server to fetch Trellix GTI score for the suspicious file being analyzed. If the customer network is protected under proxy, specify the proxy server details here so that the Trellix GTI queries can be sent out.
Malware Site Proxy — This setting is applicable when samples being analyzed at analyzer VMs request Internet access. The proxy server specified under Malware Site Proxy handles the request. Because the traffic from an analyzer VM might be malicious, you might want to segregate this traffic from your production network.