IMSVA Patch 3 can provide enhanced protection by leveraging the URL sandbox available in Virtual Analyzer to perform sandbox simulation and analysis. When the feature is enabled, IMSVA submits the following types of URLs to Virtual Analyzer:
- Unrated URLs whose reputation score is 71, or
- The URLs belonging to the following categories:
- Sharing Services (Score 56)
- Noteworthy (Score 97)
HINT: Short URLs belong to Sharing Services category.
HINT: When attachment Phishing feature is enabled, the extracted URLs go through the same process flow.
HINT: When attachment Phishing feature is enabled, the extracted URLs go through the same process flow.
To enable URL sandbox,
- Refer to the following screenshots to enable Virtual Analyzer integration, if it is not enabled yet:
- Refer to the following screenshots to enable URL sandbox in the Default spam rule or a customized spam rule: