Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deep Discovery Analyzer 6.5 Data Collection Notice

    • Updated:
    • 26 Mar 2019
    • Product/Version:
    • Deep Discovery Analyzer 6.5
    • Platform:
    • N/A N/A
Summary

The following sections outline the features that collect data, the data transmitted, and the locations on the product console where you can disable the features.

Details
Public

Threat Connect

Threat Connect allows administrators to view related threat information from the global intelligence database.

Data is only sent out when administrators click View Threat Connect in detailed log view.

Data collected
  • IP address
  • URL
  • Detection name(from Product)
Console locationVirtual Analyzer > Submissions > Completed
Console settings

View in Threat Connect (in detailed log view)

Threat Connect

Back to top

Sandbox for macOS

The Trend Micro Sandbox for macOS is a cloud-based service that analyzes possible MacOS threats.

Administrators can enable or disable Trend Micro Sandbox for macOS using the management console. However, disabling Trend Micro Sandbox for macOS severely impacts Deep Discovery Analyzer’s ability to detect advanced malware affecting the macOS platform.

Data collected
  • File name
  • File content
Console locationVirtual Analyzer > Sandbox Management > Sandbox for macOS
Console settings

Send possible macOS threats to the Trend Micro Sandbox for macOS for analysis.

Sandbox for macOS

Back to top

Smart Feedback

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Disabling Smart Feedback prevents the transmission of data to Trend Micro.

Data collected
  • File name
  • File path
  • IP address
  • URL
Console locationVirtual Analyzer > Sandbox Management > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Submit suspicious files to Trend Micro

Smart Feedback

Back to top

ICAP Server

To determine the threat name, risk rating, and category of URLs extracted from ICAP requests, Deep Discovery Analyzer sends the URL information to Web Inspection Service (WIS) and Web Reputation Service (WRS).

Administrators can enable or disable ICAP scanning using the management console. If ICAP scanning is disabled, Deep Discovery Analyzer is unable to parse requests sent by the ICAP protocol.

Data collectedURL
Console locationAdministration > Integrated Products/Services > ICAP
Console settings
  • Enable ICAP > [ICAP port number]
  • Enable ICAP over SSL

ICAP Server

Back to top

Smart Protection

Trend Micro Smart Protection technology is a next-generation, in-the-cloud protection solution providing File and Web Reputation Services.

Disabling Smart Protection prevents the transmission of data to Trend Micro, but will greatly impact Deep Discovery Analyzer’s ability to detect C&C and malicious activities.

Data collected
  • IP address
  • URL
  • Domain
Console locationAdministration > Integrated Products/Services > Smart Protection
Console settings

Status: Enabled

Smart Protection

Back to top

Virtual Analyzer

Virtual Analyzer is a secure virtual environment that manages and analyzes objects submitted by integrated products, administrators, and investigators.

Disabling Virtual Analyzer prevents the transmission of data to Trend Micro, but will severely impact Deep Discovery Analyzer’s ability to detect advanced malware.

Data collected
  • IP address
  • URL
  • Host name
  • File name
  • File path
Console locationVirtual Analyzer > Sandox Management > Images
Console settings

Delete

Virtual Analyzer

Back to top

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1122334
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.