| Product | Which SO does product use for detection | Take action based on configuration on TMCM or Apex Central 2019 directly | Send WRS request to SPS (for SO URL) |
|---|---|---|---|
| Apex One 2019 | IP, URL(query SPS), File, UDSO-SHA1 (requires Application Control), Domain | Yes | Yes (also takes action based on the Apex Central SO Settings) |
| DS 20.0 | URL(query SPS), File | Yes | Yes (also takes action based on the Apex Central SO Settings) |
| IMSVA 9.1 Build 2077 | URL(query SPS), File | Yes | Yes (also takes action based on the Apex Central SO Settings) |
| IWSVA 6.5 SP3 | IP, URL, File, UDSO-SHA1, Domain | No | |
| SPS 3.3 B1302 | URL | Yes | |
| CAS | URL, File, UDSO-SHA1 | Yes | |
| SMEX 14 Patch 5 | URL(query SPS), File | No | Yes (Only get the URL SO ratings from SPS; actions are decided on the product side) |
| SMiD/SMLD 5.8 | URL(query SPS) | No | Yes (Only get the SO ratings from SPS; actions are decided on the product side) |
| DDI 6.2 | IP, URL, File, UDSO-SHA1, Domain | No | |
| TMEMS (SaaS) | File, URL, UDSO-SHA1 | No | |
| TippingPoint | IP, Domain | No | No |
Where:
- UDSO-SHA1: User should input SHA1 value directly into Apex Central as UDSO.
- Query SPS: The SPS product needs to be integrated in the CTD environment. Apex Central 2019 and DDAN are the URL SO sources of SPS.
| Product | Auto deploy CM API key | Suspicious Object Sync Now |
|---|---|---|
| Apex One 2019 | Yes | Yes (Send suspicious object lists to managed products.) |
| DS 20.0 | Yes | Yes (Send suspicious object lists to managed products.) |
| DDAN 6.0 | No | Yes (Synchronize Virtual Analyzer suspicious object lists) |
| DDI 6.2 | No | Yes (Send suspicious object lists to managed products & Synchronize Virtual Analyzer suspicious object lists) |
| IMSVA 9.1 | Yes | No |
| IWSVA 6.5 SP3 | No | No |
| SMEX 14 Patch 5 | No | No |
| SPS 3.3 | Yes | Yes (Sync Now - Send suspicious object lists to managed products.)* |
| TMEMS (SaaS) | Yes | Yes (Send suspicious object lists to managed products.) |
Sample Submission to DDAN
| Product | Sample submission to DDAN | Apex Central 2019 Auto deploy DDAN API key to products | Send Virtual Analyzer detection log to Apex Central 2019 |
|---|---|---|---|
| Apex One 2019 | Yes | Yes | Yes |
| DS 20.0 | Yes | Yes | No |
| DDAN 6.0 | No | No | No |
| DDI 6.2 | Yes | No | No |
| DDEI 3.0 | Yes | No | No |
| IMSVA 9.1 | Yes | No | No |
| IWSVA 6.5 SP3 | Yes | No | No |
| SMEX 14 | Yes | No | Yes |
| SPS 3.3 | No | No | No |
Sample Submission to Sandbox as a Service™
| Product | Sample Submission to Sandbox as a Service™ | Apex Central 2019 Auto Deploy Sandbox as a Service™ Information to Products | Send Virtual Analyzer detection log to Apex Central 2019 |
|---|---|---|---|
| DDI 6.2 | Yes | No | No |
| Apex One 2019 | Yes | Yes | Yes |
| Product | Send WRS request to SPS | Use Scan Action provided from SPS |
|---|---|---|
| Apex One 2019 | Yes | Yes* |
| DS 20.0 | Yes | Yes* |
| IMSVA 9.1 | Yes | Yes* |
| SMEX 14 | Yes | No* |
| SMiD/SMLD 5.8 | Yes | No* |
Where
- Yes* : Query SPS and take action based on the SO action SPS syncs from TMCM.
- No* : Get the URL SO rating from SPS and actions are decided on product side.
