Integrate Intelligent Sandbox with ePO - On-prem

Log on to the ePO - On-prem server as an administrator.

Install the Intelligent Sandbox extension.

Log on to the Intelligent Sandbox web interface.

Click Manage → TIS Configuration → ePO Login/DXL.

Select Enable ePO Login.

Configure the ePO User Credentials options.

1. To enable ePO - On-prem to collect target host information, configure the options.

2. Click Test ePO Login.

3. If successful, click Submit.

Configure the Publish Threat Events to ePO options.

1. To enable Intelligent Sandbox to send relevant data about submitted samples to ePO - On-prem, select Enable Threat Event Publisher.

2. From the Severity Level drop-down list, select the security level for the events you want to send to ePO - On-prem.

3. On the Publish Threat Events Setting updated successfully message, click OK.

4. Click Apply.