The difference between "Sandboxing Threat Admin Alert (Asynchronous)" and "Sandboxing Threat Alert" explained

book

Article ID: 168924

calendar_today

Updated On:

Products

Content Analysis Software - CA

Issue/Introduction

Content Analysis (CA) provides two mechanism for alerting on events detected by a sandbox

User-added image

Resolution

Sandboxing Threat Admin Alert (Asynchronous) refers to newly discovered threats identified by the sandbox which got through to the endpoint.
 
Sandboxing Threat Alert refers to events that the sandbox blocked either using real time sandboxing (RTS) or blocking a file (that was found previously from sandbox ) via the hash cache.

Attachments