This section provides the high-level steps on how to configure Intelligent Sandbox for malware analysis and reporting
Set up the Intelligent Sandbox Appliance and ensure that it is up and running.
Based on your deployment option, ensure that the appliance has the required network connections. For example, if you integrate it withTrellix IPS, make sure the Sensor, Manager, and the Intelligent Sandbox Appliance are able to communicate with each other.
Make sure the required static analysis modules, such as the Gateway Anti-Malware Engine are up-to-date.
Create the analyzer VMs and the VM profiles.
Create the analyzer profiles that you need.
To upload the resultsto an FTP server, configure it and have the details with you before you create the profiles for the corresponding users.
Create the required user profiles.
Log on to the Intelligent Sandbox web application using the credentials of a user you created and upload a sample file for analysis. This is to check if you have configured Intelligent Sandbox as required.
In the Analysis Status page, monitor the status of the analysis.
After the analysis is complete, view the report in the Analysis Results page.