Views:

Procedure

  1. Go to Administration → Virtual Analyzer → Setup.
  2. Select Submit files to Virtual Analyzer.
  3. Select a Virtual Analyzer type and specify the settings.
    Options may vary depending on your Deep Discovery Inspector model and license.
    • Internal
      1. Select a network type.
        The selected network type determines the Internet connectivity of Virtual Analyzer.
        Virtual Analyzer requires an Internet connection to query Trend Micro cloud-based services (for example, Web Reputation Service) for available threat data.
        Network Type
        Description
        Management network
        Direct Virtual Analyzer traffic through a management port.
        Virtual Analyzer connects to the Internet using the Deep Discovery Inspector management port.
        Custom network (recommended)
        Configure a specific port for Virtual Analyzer traffic. Make sure that the port is able to connect directly to an outside network.
        Virtual Analyzer connects to the Internet using another port. Specify an available port and make sure that there are no port conflicts.
        WARNING
        WARNING
        The custom network should be independent of the management network and other internal networks so that malicious samples in the custom network do not affect hosts in the other networks.
        No network
        Isolate Virtual Analyzer traffic within Virtual Analyzer. The environment has no connection to an outside network.
        Virtual Analyzer has no Internet connection and relies only on its analysis engine.
      2. Enable and configure a dedicated proxy for the internal Virtual Analyzer.
        To configure the proxy settings, select Management network or Custom network as the network type.
        1. In Proxy Setting select Use dedicated proxy settings.
        2. In Server address, type the IP address, host name, or FQDN of the proxy server.
          Virtual Analyzer supports HTTP and HTTPS proxy servers.
        3. Type the port number.
        4. (Optional) Type the authentication credentials of the proxy server.
    • External
      1. Type the IP address and port number of the Virtual Analyzer appliance.
      2. Type the API key from the external Virtual Analyzer.
        Sign into the external Virtual Analyzer to get the API key.
      3. Click Test Connection.
    • Sandbox as a Service
      By default, the proxy setting is enabled when you select Sandbox as a Service. If a proxy is not configured, Deep Discovery Inspector still connects to the service.
      1. Click Test Connection.
  4. Click Save.
  5. For Internal Virtual Analyzer:
    1. (Optional) Click Test Internet Connectivity.
      Tip
      Tip
      Trend Micro recommends testing the Internet connectivity every time you change the settings.
    2. (Optional) Go to Internal Virtual Analyzer → Sandbox for macOS and enable Send possible threats for macOS to Trend Micro Sandbox as a Service for analysis