Content & Malware Analysis

Expand all | Collapse all

CAS Unable to Analyze the URLs

  • 1.  CAS Unable to Analyze the URLs

    Posted 06-23-2020 01:35 PM
    Hi. We have Symantec Messaging Gateway (SMG) integrated with CAS which is also doing on-box Sandboxing. The integration is working fine and CAS is analyzing the email attachments which SMG is sending to it as part of this integration. However if there are any URLs in the body of the email which is being sent to CAS by SMG, then those URLs in the email body are not being analyzed or scanned by SMG.

    We would like to know if this is an expected behavior and it is working as designed that CASMA will not scan or analyze any URLs in the body of the email which is sent to it by SMG. 


    ------------------------------
    Symantec Enthusiast
    ------------------------------


  • 2.  RE: CAS Unable to Analyze the URLs

    Posted 06-26-2020 01:20 PM
    Edited by Konstantinos Krypotos 06-26-2020 01:21 PM

    Hello

    For that you have Symantec Threat Isolation Platform (STIP) that integrates with SMG.
    Modified urls from SMG in the form https://stip.mydomain.com/?url=https://www.cnn.com are opened through web isolation.

    BR,
    Kostas