According to DDI 3.8's design, the DDI Suspicious Objects come from three sources:
- DDI internal sandbox
- DDI external sandbox
- TMCM
With the DDI internal sandbox, DDI will send the Suspicious Objects to TMCM regardless if DDI enables "Synchronize Suspicious Objects with Control Manager" or not. That is, TMCM can see the full Suspicious objects list that exist in DDI only.
With DDI external sandbox, if "Synchronize Suspicious Objects with Control Manager" is disabled, the source of DDI Suspicious Objects will be from the external sandbox (DDAN) or DDI will get Suspicious Objects from TMCM.
That is, DDI will only have one Suspicious Objects source which depends on "Synchronize Suspicious Objects with Control Manager" option. This may cause TMCM to not have the SO list. In this scenario, to ensure TMCM gets the Suspicious Objects list, you must add DDAN to TMCM/Apex Central™.
To add DDAN to TMCM:
- Open the TMCM/Apex Central™ console.
- Go to Administration > Managed servers.
- Set server type to Deep Discovery Analyzer.
- Click Add and enter the details of your DDAN.
- Click Save.
- Do the same for other DDAN, if any.