Can't integrate remote Malware Analysis with CAS - Error: "Server failed test - statusCode = 500"

Products

• ISG Content Analysis

Issue/Introduction

The Symantec Malware Analysis can be integrated with Content Analysis appliance and be dedicated to sandboxing.

In some occasions integration may result in an error:

"Server failed test" - statusCode = 500

Environment

• Content Analysis
• Malware Anaysis

Cause

When observing CAS logs a similar error can be noticed:

ERROR    : SandboxingExample::PerformRequest: SendGetRequest authentication failed with HTTP code 401 on https://#.#.#.#:8082/rapi/system/health_stats/queues

Where "#.#.#.#" is Malware Analysis IP address.

Resolution

Regenerate Malware Analysis API keys and update Content Analysis configuration as per: Configure a Malware Analysis Sandbox.