Uploading ISO images of operating systems and software required by Kaspersky Sandbox and configuring the network interface to provide Internet access to virtual machines

Objects processed by Kaspersky Sandbox may attempt activities on the Internet via the network interface used by virtual machines for Internet access. Kaspersky Sandbox can analyze the behavior of these objects.

If you prohibit Internet access Kaspersky Sandbox uses Internet access emulation to compensate for the lower detection rate due to the lack of Internet access for processed objects.

The network interface to be used by virtual machines for Internet access must be connected to a subnet that does not intersect, in terms of addressing, with the subnet that the management interface is connected to.

If the security policy of your organization denies access to the Internet from computers of local network users, and you have configured Kaspersky Sandbox network interface to be used by virtual machines for Internet access, there is a risk of the following scenario: A hacker can attach a malware to a random file and initiate a Sandbox scan of this file from the computer of a local network user. This file is then exfiltrated from the local network through the network interface used by virtual machines for Internet access while the file is being scanned by Kaspersky Sandbox.

If virtual machines do not have internet access, Kaspersky Sandbox detection rate may be significantly decreased.

To upload the ISO image of the operating system and software required by Kaspersky Sandbox and configure a network interface for providing Internet access to processed objects:

1. Click Add.

   The file selection window opens.

2. Select the operating system image from the distribution kit (ISO file), which you want to upload, and click Open.

   The image upload begins.

3. Click Install in the row with the name of the image that you want to install.

   To make sure the Kaspersky Sandbox server is operational and able to process objects, you must install a virtual machine with a Windows 7 image. You can install a virtual machine with just the Windows 7 image or virtual machines with Windows 7 and Windows 10 images. The Kaspersky Sandbox server cannot function if you install just the virtual machine with the Windows 10 image.

4. If you want to use a network interface to provide virtual machines with Internet access, turn on the Internet access interface for virtual machines (detonation interface) toggle switch.
5. In the Network interface list, select the network interface that you want to use for Internet access of objects being processed.

   The management network interface cannot be selected from this list of network interfaces.

6. In the IP address field, enter the IP address that you want to assign to this network interface.
7. In the Mask field, enter the mask of the network in which you want to use this network interface.
8. In the Default gateway field, enter the gateway address of the network in which you want to use this network interface.
9. Click Next in the lower part of the window.

   The initial configuration wizard proceeds to the next step.

10. Click Finish.

You can skip this step and configure the internet access interface for virtual machines later using Kaspersky Sandbox web interface.

Initial configuration of the application is complete and you switch to the application web interface.

Page top