Product | Which SO does product use for detection | Take action based on configuration on TMCM or Apex Central 2019 directly | Send WRS request to SPS (for SO URL) |
---|---|---|---|
Apex One 2019 | IP, URL(query SPS), File, UDSO-SHA1 (requires Application Control), Domain | Yes | Yes (also takes action based on the Apex Central SO Settings) |
DS 20.0 | URL(query SPS), File | Yes | Yes (also takes action based on the Apex Central SO Settings) |
IMSVA 9.1 Build 2077 | URL(query SPS), File | Yes | Yes (also takes action based on the Apex Central SO Settings) |
IWSVA 6.5 SP3 | IP, URL, File, UDSO-SHA1, Domain | No | |
SPS 3.3 B1302 | URL | Yes | |
CAS | URL, File, UDSO-SHA1 | Yes | |
SMEX 14 Patch 5 | URL(query SPS), File | No | Yes (Only get the URL SO ratings from SPS; actions are decided on the product side) |
SMiD/SMLD 5.8 | URL(query SPS) | No | Yes (Only get the SO ratings from SPS; actions are decided on the product side) |
DDI 6.2 | IP, URL, File, UDSO-SHA1, Domain | No | |
TMEMS (SaaS) | File, URL, UDSO-SHA1 | No | |
TippingPoint | IP, Domain | No | No |
Where:
- UDSO-SHA1: User should input SHA1 value directly into Apex Central as UDSO.
- Query SPS: The SPS product needs to be integrated in the CTD environment. Apex Central 2019 and DDAN are the URL SO sources of SPS.
Product | Auto deploy CM API key | Suspicious Object Sync Now |
---|---|---|
Apex One 2019 | Yes | Yes (Send suspicious object lists to managed products.) |
DS 20.0 | Yes | Yes (Send suspicious object lists to managed products.) |
DDAN 6.0 | No | Yes (Synchronize Virtual Analyzer suspicious object lists) |
DDI 6.2 | No | Yes (Send suspicious object lists to managed products & Synchronize Virtual Analyzer suspicious object lists) |
IMSVA 9.1 | Yes | No |
IWSVA 6.5 SP3 | No | No |
SMEX 14 Patch 5 | No | No |
SPS 3.3 | Yes | Yes (Sync Now - Send suspicious object lists to managed products.)* |
TMEMS (SaaS) | Yes | Yes (Send suspicious object lists to managed products.) |
Sample Submission to DDAN
Product | Sample submission to DDAN | Apex Central 2019 Auto deploy DDAN API key to products | Send Virtual Analyzer detection log to Apex Central 2019 |
---|---|---|---|
Apex One 2019 | Yes | Yes | Yes |
DS 20.0 | Yes | Yes | No |
DDAN 6.0 | No | No | No |
DDI 6.2 | Yes | No | No |
DDEI 3.0 | Yes | No | No |
IMSVA 9.1 | Yes | No | No |
IWSVA 6.5 SP3 | Yes | No | No |
SMEX 14 | Yes | No | Yes |
SPS 3.3 | No | No | No |
Sample Submission to Sandbox as a Service™
Product | Sample Submission to Sandbox as a Service™ | Apex Central 2019 Auto Deploy Sandbox as a Service™ Information to Products | Send Virtual Analyzer detection log to Apex Central 2019 |
---|---|---|---|
DDI 6.2 | Yes | No | No |
Apex One 2019 | Yes | Yes | Yes |
Product | Send WRS request to SPS | Use Scan Action provided from SPS |
---|---|---|
Apex One 2019 | Yes | Yes* |
DS 20.0 | Yes | Yes* |
IMSVA 9.1 | Yes | Yes* |
SMEX 14 | Yes | No* |
SMiD/SMLD 5.8 | Yes | No* |
Where
- Yes* : Query SPS and take action based on the SO action SPS syncs from TMCM.
- No* : Get the URL SO rating from SPS and actions are decided on product side.