Sandboxing" Tab - Stormshield SN series Configuration Manual

File filter (MIME type)
Status
Action
MIME type
Maximum size for
antivirus and
sandboxing scan (KB)
Actions on files
When a virus is
detected
When the antivirus
scan fails
When data collection
fails

"Sandboxing" tab

Sandboxing
Status
File types
Page 259/448
Indicates whether a file is active or inactive. 2 positions are available: "Enabled" or
"Disabled".
Indicates the action to be taken for the file in question, out of 3 possibilities:
Detect and block viruses: The file will be scanned in order to detect viruses that
l
may have infected the files. These viruses will be blocked.
Pass without analyzing files: The file can be downloaded freely without any
l
antivirus scans being performed.
Block: The download is prohibited.
l
Indicates the file content type. This could be text, an image or a video, to be defined in
this field.
Examples:
"text/plain*"
"text/*"
"application/*"
This field corresponds to the maximum size of files that will be scanned. This limit has
been set to 1000 KB by default.
This field contains 2 options. By selecting "Block", the analyzed file will not be sent. By
selecting "Pass", the antivirus will send the file in its original form.
This option defines the behavior of the antivirus module if the analysis of the file it is
scanning fails.
Example:
The file could not be scanned as it has been locked.
If Block has been specified, the file being scanned will not be sent.
If Pass without scanning has been specified, the file being scanned will be sent.
This option defines the behavior of the antivirus module when certain events occur. It
is possible to Block traffic when information retrieval fails, or Pass without scanning.
Example:
If the hard disk has reached its capacity, information will not be downloaded.
This column displays the status ( Enabled/ Disabled) of sandboxing for the
corresponding file type. Double-click on it to change its status.
The sandboxing option allows scanning four types of files:
Archive: these include the main types of archives (zip, arj, lha, rar, cab, etc)
l
Office document (Office software): all types of documents that can be opened with
l
the MS Office suite.
Executable : files that can be run in Windows (files with the extension
l
".exe",".bat",".cmd",".scr", etc).
PDF: files in Portable Document Format (Adobe)
l
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
PROTOCOLS