Enable the malware port

By default, Intelligent Sandbox uses the management port (eth-0) to provide Internet access to samples, but you can also configure the malware port to securely access the Internet.

Add a new Ethernet Adapter (eth-1) with Adapter Type E1000 for your Intelligent Sandbox.
For information about how to add a new ethernet adapter, see the VMWare vSphere Client documentation for your specific vSphere version..
Set malware DNS setting to a DNS server that is reachable through the malware interface port, for the malware Internet access to function correctly.
The malware DNS is required to set for the following functions to be operable:
- Activation VM Internet access
- Sandbox analysis DNS name resolution
- URL download
- URL analysis
Note
When malware DNS IP address is configured from the UI, it does not use the dedicated interface to verify that the IP address is valid. Instead, it attempts to connect through the management interface to perform a nslookup check. Once we get a response confirming the validity of the IP through nslookup, the Malware DNS IP configuration is established. Any future requests for malware analysis are sent through the dedicated malware interface.
For information about how to configure Malware DNS, see Intelligent Sandbox Installation Guide.

Log on to the Intelligent Sandbox CLI and enable the malware port.
For example, set intfport 1 enable to enable eth-1 port.
Configure the malware port IP address and subnet mask.
For example, set intfport 1 ip 10.10.10.10 255.255.255.0
Make sure the IP address is outside your network.
For the Ethernet port, configure the gateway that you want to route the Internet access.
For example, set malware-intfport 1 gateway 10.10.10.252
To allow the port to check if it is configured for malware Internet access, use the show intfport <port number> command.
For example, show intfport 1.
Verify these entries:
- Malware Interface Port
- Malware Gateway
To revert to the management port (eth-0) for malware Internet access, run set malware-intfport mgmt in the CLI. Intelligent Sandbox uses the management port IP and default gateway to provide Internet access to samples.
For general Intelligent Sandbox traffic, use the route add network command.
For Internet traffic from analyzer VMs, use set malware-intfport.
The route add network and set malware-intfport commands do not affect each other.