The article explains the URL sandbox feature introduced in IMSVA 9.1 Patch 3, as well as the procedure to enable it.
IMSVA Patch 3 can provide enhanced protection by leveraging the URL sandbox available in Virtual Analyzer to perform sandbox simulation and analysis. When the feature is enabled, IMSVA submits the following types of URLs to Virtual Analyzer:
- Unrated URLs whose reputation score is 71, or
- The URLs belonging to the following categories:
- Sharing Services (Score 56)
- Noteworthy (Score 97)
HINT: When attachment Phishing feature is enabled, the extracted URLs go through the same process flow.
To enable URL sandbox,