Content & Malware Analysis

 View Only

 Does the CAS virtual appliance CAS-VA-C4L have on-box sandboxing

Wasfi Bounni's profile image
Broadcom Knight Wasfi Bounni posted Oct 10, 2022 06:56 PM
Hi;

As far as I know, only hardware CAS devices S-400 and S-500 models can have on-box sandboxing. Also, as far as I know, all virtual appliances can only act as Sandboxing brokers only but cannot have on-box sandboxing. 

Is this still the case with virtual appliance: CAS-VA-C4L running the latest firmware version? If not. i.e. If CAS-VA-C4L supports on-box sandboxing, then does it support sandboxing in a virtual windows sandbox environment too?

Kindly
Wasfi
Jacob Miles's profile image
Broadcom Employee Jacob Miles
Hi Wasfi,

I hope you are well. There are a couple different sandboxes, and CAS VA can do something called an Emulation Sandbox. On box sandboxing is often a reference to the full fledged virtual sandbox using real Windows images, and for that case, you are correct that the CAS S400 and S500 were the only models that could run that. 

I hope that helps!