SandBlast Environment Settings
By default, SandBlast Agent uses the SandBlast Cloud for Threat Extraction and Threat Emulation.
If you have one or more SandBlast Appliances, you can use them as an alternative to SandBlast Cloud.
To configure SandBlast Agent to work with a SandBlast Appliance:
- In a SandBlast Agent Threat Extraction and Threat Emulation rule, right-click the Action and select .
- Select.
- In the Properties of the action, click .
- In the window, select an appliance from the list, or click and enter:
- of the
- - Click to select a certificate or to import one.
- To configure a certificate for communication between SandBlast Agent and the SandBlast Appliance, see sk116381.
- By default the Cloud will be used if the Appliance is not available. If you do not want the SandBlast Cloud to be used as backup, clear the option .
- Click .
To define the maximum size of files that are sent for emulation:
- In a SandBlast Agent Threat Extraction and Threat Emulation rule, right-click the Action and select .
- Change the value for . The default is that file less than 10 MB are sent for emulation.