Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Updated default File Submission Rules for Virtual Analyzer in Deep Discovery Inspector (DDI) 3.8 Service Pack 5 (SP5)

    • Updated:
    • 16 Apr 2017
    • Product/Version:
    • Deep Discovery Inspector 3.8
    • Platform:
    • CentOS 7.0 64-bit
Summary

DDI 3.8 SP5 (B1165) EN has officially been released and is now available in our Download Center. From this version of DDI, as recommended by security experts, default file submission rules for Virtual Analyzer are updated.

Details
Public

DDI allows users to create file submission rules to ensure suspicious files are analyzed. File submission rules check files based on detection types, detection rules, and file properties.

File submission rules for Virtual Analyzer can be configured at the management console via Administration > Virtual Analyzer > File Submissions.

To compare the difference between DDI 3.8 SP5 and eariler versions:

  • Default settings before DDI 3.8 SP5:

    Click image to enlarge.

  • Default settings in DDI 3.8 SP5:

    Click image to enlarge.

Recommended Action

  • For those who did the fresh installation of DDI 3.8 SP5:

    • Default file submission rules for Virtual Analyzer are shown above.
  • For those who upgraded to DDI 3.8 SP5 via migration:

    • The original file submission rules for Virtual Analyzer are kept.
    • The new default settings can be applied using the Reset feature.

  • For DDI versions earlier than version 3.8 SP5:

    • The new default settings can be applied using the Import feature, the settings (va_ploicy.dat) can be downloaded using this link.

    Trend Micro recommends customers back up the original file submission rules using the Export feature before applying any new configuration.

    For support assistance, contact Trend Micro Technical Support.

Premium
Internal
Rating:
Category:
Configure; Install; Upgrade; Migrate; SPEC
Solution Id:
1117186
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.