Content & Malware Analysis

 View Only
  • 1.  On box VS cloud based sandboxing

    Posted Sep 02, 2019 09:15 AM

    Hi;

    Is there a best practice regarding this. Like send all private files like .docs to the on-box sandboxing engine and the non-sensitive file types to be sandboxed by the could engine.

    It would be great if there is a link or an article.

     

    Kindly

    Wasfi



  • 2.  RE: On box VS cloud based sandboxing
    Best Answer

    Posted Sep 05, 2019 03:18 AM

    Hi Wasfi,

     

                     There is no best practise that I could find on this. Cloud sandboxing is adding a bit more delay into the whole process. So anything that is not business critical can be send to on-box considering that you are using "wait for result". If not waiting for result either is fine if you ask me. May be someone else might have a better suggestion