The NDR appliance can extract a suspicious file from the network session and send it directly to the Malware Analysis Series appliance for analysis. You must integrate the NDR Series appliance with the Malware Analysis Series appliance for malware analysis.
For more information about performing analysis, see the NDR Product Guide and the Malware Analysis Series Threat Management Guide.