Empty on-box sandboxing statistics in content analysis (CAS)

Products

• Content Analysis Software

Issue/Introduction

Executed sandboxing tasks are not reflected in statistics

Environment

• On-box sandboxing license active and valid
• Windows profile for sandboxing correctly configured
• Malware samples are sent manually to on-box sandboxing from Symantec EDR to CAS via REST API
• Tasks for on-box sandboxing are executed on CAS successfully

Resolution

• Sandboxing statistics are only for ICAP protocol
• Samples sent via REST API are not counted to sandboxing statistics

Additional Information

The CAS UI shows only the ICAP Sandboxing statistics and not REST API
KB: https://knowledge.broadcom.com/external/article/170135/content-analysis-rest-api-statistics.html