Uploading ISO images of operating systems and software required by Kaspersky Sandbox and configuring the network interface to provide Internet access to processed objects

Objects processed by Kaspersky Sandbox may attempt activities on the Internet via the network interface used for Internet access of processed objects. Kaspersky Sandbox can analyze the behavior of these objects.

If you prohibit Internet access Kaspersky Sandbox uses Internet access emulation to compensate for the lower detection rate due to the lack of Internet access for processed objects.

The network interface used for Internet access of processed objects must be isolated from the local network of your organization.

If the security policy of your organization denies access to the Internet from computers of local network users, and you have configured Kaspersky Sandbox network interface for Internet access of processed objects, there is a risk of the following scenario: A hacker can attach a malicious application to a random file and initiate a Sandbox scan of this file from the computer of a local network user. This file is then exfiltrated from the local network through the network interface used for Internet access of processed objects while the file is being scanned by Kaspersky Sandbox.

If virtual machines do not have Internet access, Kaspersky Sandbox detection rate may be significantly decreased.

To upload the ISO image of the operating system and software required by Kaspersky Sandbox and configure a network interface for providing Internet access to processed objects:

1. Click the Upload button.

   The file selection window opens.

2. Select the operating system image from the distribution kit (ISO file), which you want to upload, and click Open.

   The file selection window closes.

   The list shows the uploaded image of the operating system and software required for the operation of Kaspersky Sandbox. The files are extracted and the virtual machine and software are installed automatically.

3. In the Network Interface list, select the network interface that you want to use for Internet access of objects being processed.

   The management network interface cannot be selected from this list of network interfaces.

4. In the IP field, enter the IP address that you want to assign to this network interface.
5. In the Mask field, enter the mask of the network in which you want to use this network interface.
6. In the Default gateway field, enter the gateway address of the network in which you want to use this network interface.
7. Click Next in the lower part of the window.

   The initial configuration wizard proceeds to the next step.

8. Click Finish.

You can skip this step and configure the interface for Virtual Machines Internet access later using Kaspersky Sandbox web interface.

Initial configuration of the application is complete and you switch to the application web interface.

Page top